The Hackers Behind Shai-Hulud: Lucky or Skilled?

The cybercrime group TeamPCP has been identified as a primary driver behind the Shai-Hulud worm, causing significant damage to the open-source ecosystem through exploiting vulnerabilities like React2Shell and misconfigured Docker APIs. Initially characterized as opportunistic, TeamPCP has evolved, leveraging supply cha…