{
  "entry": {
    "kind": "vuln",
    "slug": "teampcp-injects-malware-into-microsoft-linked-github-repositories",
    "name": "teampcp-injects-malware-into-microsoft-linked-github-repositories",
    "vendor": "Azure / Azure-Samples / Microsoft GitHub repos touched",
    "description": "TeamPCP used a compromised GitHub account to inject malicious code into at least 42 repositories and 236 branches across the Azure, Azure-Samples, and Microsoft GitHub organizations (published 02:36-03:22 UTC on 5 June 2026). The malicious code remained in the GitHub repos and had not been pushed to other distribution channels as of disclosure.",
    "website": "https://thehackernews.com/2026/06/miasma-malware-targets-npm-packages-and.html",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-06-05",
    "risk": {
      "score": 75,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "teampcp-injects-malware-into-microsoft-linked-github-repositories",
      "aliases": [
        "ti-044"
      ],
      "title": "TeamPCP Injects Malware into Microsoft-Linked GitHub Repositories",
      "summary": "TeamPCP used a compromised GitHub account to inject malicious code into at least 42 repositories and 236 branches across the Azure, Azure-Samples, and Microsoft GitHub organizations (published 02:36-03:22 UTC on 5 June 2026). The malicious code remained in the GitHub repos and had not been pushed to other distribution channels as of disclosure.",
      "severity": "high",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Malware"
      ],
      "componentType": "agent",
      "component": {
        "name": "Azure / Azure-Samples / Microsoft GitHub repos touched",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Azure / Azure-Samples / Microsoft GitHub repos touched 02:36-03:22 UTC 5 June 2026",
          "fixed": null
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-06-05",
      "modifiedAt": "2026-06-05",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://thehackernews.com/2026/06/miasma-malware-targets-npm-packages-and.html"
        }
      ],
      "mitigation": "Do not build from affected branches; verify commit provenance and pin to known-good SHAs. Review any clones/forks pulled around 5 June 2026 and scan for injected code before use.",
      "detectedByAnomity": true
    }
  }
}