Shai-Hulud copycat wave
campaign · campaign:teampcp-shai-hulud-copycat-wave-ox-security-checkmarx-pcpja
First copycat wave around TeamPCP's Shai-Hulud tooling: OX Security-documented npm packages with Phantom Bot and SSH/cloud stealers, the trojanised Checkmarx Jenkins plugin (third in three months), and SentinelLabs' PCPJack rival worm.
Coverage
0
first 2026-05-19 → last –
no data
Latest activity
–
no entry about it yet
Peak priority
·
no entry about it yet
Targets
·
no sector or region stated
Sources cited
0
0 hosts
Story timeline
No published entries reference this entity yet.
Entries about Shai-Hulud copycat wave
No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.