CanisterWorm

Named by 5 kept items in this workspace.

3 items name it under threat actors and 2 under classification.key entities.

Search every workspace for CanisterWorm. It matches the name as written, so it can find other things that share it.

The items that name it 5

Software supply chain security best practices for 2026
articleas classification.key entities2026-10-21
Shai-Hulud was the best thing to happen to supply chain security
articleas threat actors2026-08-24
Mar 20-21, 2026 npm worm deployed by TeamPCP via stolen tokens; 28+ packages infected in under 60 seconds; harvested credentials and self-propagated.
The State of Open Source Supply Chain Attacks
articleas threat actors2026-08-23
Spread backdoors across npm in March 2026.
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
writeupas classification.key entities2026-07-02
JFrog: npm v12
articleas threat actors2026-06-18It is written here as CanisterWorm (March 2026).
Campaign compromising @emilgroup and @teale.io namespace packages using malicious postinstall script to deploy a Python-based backdoor, harvesting npm auth tokens and self-propagating

All threat actors in this workspace.