← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,511
Relationships
32,585
Potential duplicates
0
Filter by kind
Entities (event)
↯f1e24db2
Socket reports the 'Mini Shai-Hulud' campaign becomes active targeting npm and PyPI packages, including SAP and Intercom ecosystems.(2026-04-29:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯b772d5f4
Bitwarden CLI npm package (version 2026.4.0) trojanized for approximately 90 minutes. Payload contained string 'Shai-Hulud: The Third Coming'. Bitwarden confirmed no end-user vault data was at risk.(2026-04-22:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ab47875d
Checkmarx KICS GitHub Action compromised via stolen personal access tokens. Alleged data breach at European Commission Europa.eu hub (90+ GB of data); this secondary breach claim is unconfirmed in Tier 1 sources.(2026-03-23:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯986601f5
Aqua Security's Trivy vulnerability scanner compromised via GitHub Actions; first confirmed TeamPCP attack in the 2026 series.(2026-03-19:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ad2b3f88
TeamPCP allegedly exploits incomplete credential rotation in Aqua Security's Trivy repository, beginning Wave 3 of the campaign.(2026-02-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯df0b557a
Mini Shai-Hulud Wave 2: 492 packages and 700+ repositories compromised in second worm campaign wave.(2025-11-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ac306013
Mini Shai-Hulud Wave 1: Over 500 npm packages compromised in the first documented wave of the TeamPCP supply chain worm campaign.(2025-09-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯0050e190
U.S. District Judge Colleen Kollar-Kotelly sentences Evan Tangeman to 70 months in federal prison plus three years of supervised release.(2026-04-24:evan-tangeman)event
↯8ab9b60c
Evan Tangeman pleads guilty to RICO conspiracy in U.S. District Court for the District of Columbia, becoming the ninth defendant to enter a guilty plea in the investigation. He admits to laundering at least $3.5 million.(2025-12-08:evan-tangeman)event
↯95c49570
Nicholas Dellecave is arrested in Miami as part of a second superseding indictment adding three new defendants to the case.(2025-12-03:evan-tangeman)event
↯a54dd2b5
Social Engineering Enterprise operations cease; enterprise active period closes.(2025-05-01:evan-tangeman)event
↯64b7fbc7
Malone Lam and Jeandiel Serrano are arrested; Tangeman is alleged to have arranged destruction of digital devices following these arrests.(2024-09-01:evan-tangeman)event
↯b98550d2
The enterprise executes its largest known theft: over 4,100 Bitcoin (approximately $263 million) stolen from a single victim in the District of Columbia via social engineering and remote desktop software.(2024-08-18:evan-tangeman)event
↯0bc85612
The Social Engineering Enterprise begins operations, formed from relationships on online gaming platforms, with Malone Lam identified as a primary organizer.(2023-10-01:evan-tangeman)event
↯720971a6
Campaign described as active and ongoing as of June 2026, with continued abuse of the OpenClaw brand and GitHub notification system to target developers.(2026-06-15:openclaw-github-phishing-campaign)event
↯0c5bc868
CoinDesk, Decrypt, CSO Online, HackRead, CyberNews, and multiple crypto publications pick up the OX Security report, broadening awareness of the campaign among developers.(2026-03-19:openclaw-github-phishing-campaign)event
↯5e0c6f01
Throwaway GitHub accounts used in the phishing campaign are deleted within hours of the campaign's launch, limiting the active exposure window but not eliminating the infrastructure.(2026-03-12:openclaw-github-phishing-campaign)event
↯cfa60a0e
OpenClaw founder Peter Steinberger bans all cryptocurrency discussion on the project's Discord server following the CLAWD fake token incident. Steinberger publicly disavows any crypto connection and states the project will never issue a token.(2026-02-01:openclaw-github-phishing-campaign)event
↯540912bd
Scammers exploit a brief gap in OpenClaw's social media account transition (prompted by an Anthropic trademark notice over the name 'Clawdbot') to promote a fake CLAWD token. The token allegedly reaches a market capitalization of approximately $16 million before collapsing by over 90%.(2026-01-01:openclaw-github-phishing-campaign)event
↯4f29f38d
DOJ publicly announces all three Operation Token Mirrors indictments simultaneously, including Vortex. Gleb Gora makes his initial appearance before a U.S. Magistrate Judge in Oakland, California following extradition from Singapore.(2026-03-30:vortex)event
↯24ad237d
Third indictment in Operation Token Mirrors filed against Contrarian and Antier defendants (approximate date; filed September 2025).(2025-09-01:vortex)event
↯5d3816c2
Gleb Gora (age 24, CEO of Vortex) arrested in Singapore at the request of the United States government.(2025-10-02:vortex)event
↯1b079723
Federal grand jury in Oakland returns indictment charging Gleb Gora (CEO), Sergei Ryzhkov (CFO), and Michael Vogel (Business Development Manager) of Vortex with wire fraud conspiracy and wire fraud.(2025-08-28:vortex)event
↯b64e1655
Federal grand jury in Oakland indicts Gotbit-affiliated defendants as part of Operation Token Mirrors (approximate date; Gotbit indictment filed March 2025).(2025-03-01:vortex)event
↯659897f6
First phase of Operation Token Mirrors charges unsealed by DOJ, targeting an initial wave of cryptocurrency market manipulation defendants.(2024-10-01:vortex)event
↯ea7e901f
Marlon Ferro sentenced to 78 months in federal prison, 3 years supervised release, and $2.5 million restitution for conducting home invasions to steal hardware wallets.(2026-05:malone-lam-crypto-syndicate)event
↯bb423c9a
Evan Tangeman sentenced to 70 months in federal prison plus 3 years supervised release for his role in laundering stolen funds and obstructing justice.(2026-04-24:malone-lam-crypto-syndicate)event
↯f5108e0c
Status conference held in U.S. District Court for D.C. regarding plea negotiations for Malone Lam and Jeandiel Serrano. Both remain in pre-trial detention.(2026-01-12:malone-lam-crypto-syndicate)event
↯ac88a7c4
Evan Tangeman pleads guilty to RICO conspiracy; ninth defendant to plead guilty.(2025-12:malone-lam-crypto-syndicate)event
↯7b651c86
Kunal Mehta ('Papa', 'The Accountant', 'Shrek') pleads guilty to RICO conspiracy; eighth defendant to plead guilty.(2025-11-18:malone-lam-crypto-syndicate)event
↯9906c346
Marlon Ferro pleads guilty to RICO conspiracy.(2025-10-17:malone-lam-crypto-syndicate)event
↯0f6ad783
Malone Lam appears in Washington, D.C., federal court and pleads not guilty to the superseding indictment.(2025-05-19:malone-lam-crypto-syndicate)event
↯204653d8
Superseding indictment unsealed adding 12 additional defendants including Kunal Mehta, Hamza Doost, Joel Cortez, Evan Tangeman, Marlon Ferro, Conor Flansburg, Nicholas Dellecave, Mustafa Ibrahim, and Danish Zulfiqar. Charges include RICO conspiracy, wire fraud conspiracy, money laundering, and obstruction of justice.(2025-05-15:malone-lam-crypto-syndicate)event
↯7f941967
Marlon Ferro arrested with two firearms and false identification documents.(2025-05-13:malone-lam-crypto-syndicate)event
↯f89038d6
CNBC reports that co-conspirator Veer Chetal's parents were carjacked in Connecticut in a botched kidnapping-for-ransom scheme allegedly connected to the August 2024 Bitcoin theft proceeds.(2024-10:malone-lam-crypto-syndicate)event
↯49349eb7
Malone Lam arrested in Miami; Jeandiel Serrano arrested in Los Angeles. Both charged with conspiracy to steal and launder cryptocurrency. Initial indictment filed in U.S. District Court for the District of Columbia.(2024-09:malone-lam-crypto-syndicate)event
↯c12f9543
Malone Lam and Jeandiel Serrano execute a social engineering attack against a Genesis creditor in Washington, D.C., stealing over 4,100 Bitcoin valued at approximately $230–243 million — the largest single cryptocurrency theft from an individual victim on record at the time.(2024-08-18:malone-lam-crypto-syndicate)event
↯fa7a3581
Marlon Ferro allegedly conducts a home invasion in New Mexico while Lam monitors the victim's location via iCloud, resulting in theft of over $14 million in cryptocurrency from a second victim.(2024-07:malone-lam-crypto-syndicate)event
↯8e2e6d2a
Marlon Ferro ('GothFerrari') allegedly breaks into a home in Winnsboro, Texas, stealing approximately 100 Bitcoin worth over $5 million.(2024-02:malone-lam-crypto-syndicate)event
↯662ea6cc
Malone Lam and initial co-conspirators begin the Social Engineering Enterprise while residing together in Texas, recruiting members through online gaming networks.(2023-10:malone-lam-crypto-syndicate)event
↯802a4150
Second superseding indictment unsealed, adding Nicholas Dellecave, Mustafa Ibrahim ('Krust'), and Danish Zulfiqar ('Meech') as defendants charged with RICO conspiracy. Ibrahim and Zulfiqar were arrested in Dubai. Total charged defendants reach at least 17; nine have pleaded guilty.(2026-06-01:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯38da1704
Marlon Ferro ('GothFerrari') sentenced to 78 months in prison and ordered to pay $2.5 million in restitution.(2026-05-07:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯bacf801a
Evan Tangeman sentenced to 70 months in prison.(2026-04-24:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯77c648a9
Bitcoin Magazine reports on Evan Tangeman's guilty plea.(2025-12-09:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯eb6b1ead
Evan Tangeman, 22, of Newport Beach, California, pleads guilty to RICO conspiracy, becoming the ninth defendant to do so. He admits to laundering at least $3.5 million.(2025-12-08:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯d7c5800a
Nicholas Dellecave (alias 'Souja') arrested in Miami.(2025-12-03:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯0f6ec040
Marlon Ferro ('GothFerrari') pleads guilty to RICO conspiracy before Judge Kollar-Kotelly for his role as the enterprise's residential burglar.(2025-10-17:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯3d4315fb
DOJ unseals first superseding indictment charging 12 additional defendants with RICO conspiracy, expanding total losses to over $263 million.(2025-05-16:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯08920570
U.S. District Court sets October 6, 2025 as trial date for Malone Lam.(2025-03-09:gamer-crew-263m-social-engineering-ring-new-defendants)event
↯2a10cd5f
Initial DOJ indictment filed against Malone Lam and Jeandiel Serrano in the District of Columbia on charges related to stealing over $230 million in cryptocurrency.(2024-09-19:gamer-crew-263m-social-engineering-ring-new-defendants)event
Data refreshes within about 10 minutes · All metrics derived from Supabase