After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets

This collection highlights an escalation in cloud- and supply-chain-focused attacks and several active exploit vectors: a new TeamPCP variant called PCPJack uses Parquet files for stealthy, pre-validated discovery to steal cloud secrets; TeamPCP supply-chain compromises (including npm and SAP packages) continue to expand; the TrustFall issue enables code execution via malicious repos in multiple LLM/CLI tools (Claude Code, Cursor CLI, Gemini CLI, Copilot CLI); VoidStealer authors bypassed Google App-Bound Encryption to aid infostealers; a critical cPanel authentication-bypass is being actively