GitHub Hacker EXPOSED BY HIS CAT

John Hammond · 18 min

The video walks through an open-source intelligence investigation that links the TeamPCP threat actor's aliases, Telegram accounts, GitHub and HackerOne profiles, and a Steam account to a single real identity. It shows how username pivots, breach-data lookups and reverse image searches were used to build that link. It also gives background on TeamPCP's supply-chain attacks, including the compromised Trivy GitHub Actions workflow and the poisoned LiteLLM releases.