ioc-database

The most consequential CI/CD supply chain attack documented to date. A cascading credential-chain campaign.

Skills
Security
3

What it does and how to use it

A skill that teaches Claude Code to do security tasks well. It is packaged knowledge the model uses whenever it is relevant.

Install the skill (command above).
In Claude Code, describe what you need - the skill turns on by itself when the context fits.
No commands to memorize: you talk in plain language and the skill does the rest.

Install (Claude Code)

mkdir -p .claude/skills/ioc-database && curl -fsSL https://doutorai.pt/data/lib/skills__ioc-database.md -o .claude/skills/ioc-database/SKILL.md

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

# Supply Chain IOC Database

Last updated: 2026-03-31

## Active Campaigns

### TeamPCP Campaign (March 19-31, 2026) - CRITICAL

The most consequential CI/CD supply chain attack documented to date. A cascading credential-chain campaign.

**Timeline:**
- Mar 19: Trivy backdoored (CVE-2026-33634, CVSS 9.4) - 75 trivy-action tags + 7 setup-trivy tags poisoned
- Mar 20: CanisterWorm deployed across 141+ npm package artifacts (66+ unique packages)
- Mar 22: WAV steganography variant detected; Checkmarx brand impersonation
- Mar 23: KICS GitHub Action (35 tags) + ast-github-action compromised
- Mar 

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans