{
	"id": "ce0a6216-6b74-4880-9a5d-efc9d6db656e",
	"created_at": "2026-10-14T02:04:36.883634Z",
	"updated_at": "2026-10-14T02:05:57.61554Z",
	"deleted_at": null,
	"sha1_hash": "1d67fe06aeb4ae438bd21b1c3266476227ea220e",
	"title": "Shai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHub",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 2241165,
	"plain_text": "https://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nShai-Hulud Goes Open Source: Malware Creators Leak Their\n\nOwn Code to GitHub\n\nBy Moshe Siman Tov Bustan\n\nPublished: 2026-05-12 · Archived: 2026-10-14 02:02:09 UTC\n\nBreaking News: TeamPCP has gone open source — and the copycats are already here. The group\n\nbehind Shai-Hulud has leaked their own malware code to GitHub, and independent threat actors\n\nhave already begun modifying it and expanding its reach. OX Security is actively tracking this as\n\nit unfolds.\n\nTeamPCP has escalated. The group behind Shai-Hulud is now spreading not just their malware, but their own\n\nsource code, using what appear to be compromised GitHub accounts.\n\nCurrently 2 repositories are active, but that number is growing as infections spread.\n\nNew repositories can be monitored in real time using this link. Search GitHub for “A Gift From TeamPCP.”\n\nThe repository isn’t just source code; it’s a full instruction manual. TeamPCP’s main page walks anyone through\n\nexactly how to deploy the malware.\n\nPage 1 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nThe commit history raises immediate flags. Every commit is dated January 1, 2099 – a deliberate obfuscation\n\ntechnique – with no identifying details beyond the handles TeamPCP_OSS and TeamPCP.\n\nTeamPCP isn’t just hiding their tracks — they’re hiding them in the future.\n\nAll commits carry that same future-dated timestamp. But the trail doesn’t end there. A forked version of the\n\nrepository shows additional code contributed by an account called “agwagwagwa.”\n\nPage 2 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nThis account contains a name with two letters in Hebrew, an Anthropic refusal string, and other unrelated stuff\n\nnext to the Shai Hulud fork.\n\nThree GitHub accounts have been identified as potentially affiliated with the newly public Shai-Hulud code:\n\nagwagwagwa\n\nheaddirt\n\ntmechen\n\nall three are worth watching.\n\nWhether these are TeamPCP members or independent actors who spotted an opportunity, it’s too early to say. But\n\nPage 3 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nagwagwagwa has already submitted a pull request adding FreeBSD support, expanding the malware’s potential\n\nreach.\n\nWhy do we think they are affiliated with TeamPCP? Well… cats.\n\nTeamPCP’s theme is cats, and agwagwagwa’s GitHub account has a “meow!” repository inside. Does this mean\n\nthey are part of the group? We can’t know for sure, but it is very, very suspicious.\n\nPage 4 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nThe repository also contains what’s known as an “Anthropic Magic String” – a string of text designed to prevent\n\nClaude Code from analyzing the profile. Someone doesn’t want AI eyes on their work.\n\ntmechen’s profile picture is a… cat too. But there’s no other relevant malicious activity relating him to the group.\n\nPage 5 of 9\n\nheaddirt’s account is private.\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nBy analyzing the malware’s source code, the same patterns from previous Shai-Hulud attacks are immediately\n\nrecognizable, as expected. This includes uploading stolen credentials to a new GitHub repository.\n\nPage 6 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nSending the information to a predefined C2 server.\n\nExfiltrating secrets, credentials, crypto wallets, accounts and more.\n\nPage 7 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nAnd we even found code directly targeting Claude Code configurations, by adding hooks to execute the malware\n\nwhen Claude starts.\n\nPage 8 of 9\n\nhttps://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nTeamPCP isn’t just spreading malware anymore – they’re spreading capability. By going open source, they’ve\n\nhanded any willing actor the tools to build their own variant. The copycats are already here.\n\nSource: https://www.ox.security/blog/shai-hulud-open-source-malware-github/\n\nPage 9 of 9",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.ox.security/blog/shai-hulud-open-source-malware-github/"
	],
	"report_names": [
		"shai-hulud-open-source-malware-github"
	],
	"threat_actors": [],
	"ts_created_at": 1791943476,
	"ts_updated_at": 1791943557,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/1d67fe06aeb4ae438bd21b1c3266476227ea220e.pdf",
		"text": "https://archive.orkl.eu/1d67fe06aeb4ae438bd21b1c3266476227ea220e.txt",
		"img": "https://archive.orkl.eu/1d67fe06aeb4ae438bd21b1c3266476227ea220e.jpg"
	}
}