Pulse Detail — Threat Intelligence

PULSE NAME

Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets

WHITE TeamPCP Tr1sa111 2026-03-21 Modified: 2026-03-21

IOCs

LOW VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

TeamPCP Cloud stealer

Indicators of Compromise (4)

All FileHash-SHA1 FileHash-SHA256 URL hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	57a97c7e7821a5776cebc9bb87c984fa69cba8f1	—	2026-03-21
FileHash-SHA256	18a24f83e807479438dcab7a1804c51a00dafc1d526698a66e0640d1e5dd671a	—	2026-03-21
URL	https://scan.aquasecurtiy.org	—	2026-03-21
hostname	scan.aquasecurtiy.org	—	2026-03-21

References (1)