This campaign compromises multiple components in the open source developer ecosystem, including NPM packages (@antv namespace), GitHub Actions workflows, and a VSCode extension. It initiates multi-stage infections using GitHub infrastructure and orphaned commits to deploy payloads via bun. The malware harvests a broad range of credentials (GitHub tokens, SSH keys, cloud credentials, browser secrets) and exfiltrates them through public GitHub repositories controlled by the attacker. Persistence is achieved through a Python backdoor that polls GitHub for signed commands containing trigger strings, allowing remote code execution. Attribution analysis indicates moderate confidence linking the campaign to the threat actor TeamPCP. There is no indication of known exploits in the wild beyond this campaign, and no patch or official fix is documented.

The campaign enables credential theft across multiple sensitive credential types, including GitHub tokens, SSH keys, cloud credentials, and browser secrets, potentially compromising developer environments and CI/CD pipelines. The use of public GitHub repositories for data exfiltration and a persistent Python backdoor that allows remote code execution increases the risk of prolonged unauthorized access and further compromise. This can lead to supply chain contamination affecting downstream users of the compromised packages and tools.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Given the lack of official fixes or patches, organizations should audit and monitor their use of the affected NPM packages (@antv namespace), GitHub Actions (actions-cool/issues-helper), and the VSCode extension nrwl.angular-console. Review and rotate exposed credentials such as GitHub tokens, SSH keys, and cloud credentials. Investigate and remove any unauthorized backdoors or orphaned commits in GitHub repositories. Employ strict code review and supply chain security practices to detect and prevent similar compromises.