Latest TeamPCP news

Six years, one infrastructure set. Oligo traced the group behind March's supply chain attacks back to a 2020 cryptojacking operation and to the first self-propagating botnet built on hijacked AI clusters. Stolen credentials were validated within hours, and one payload …

CERT-EU traced the European Commission's cloud breach to a poisoned Trivy build pushed by TeamPCP on March 19. AI startup Mercor confirmed a separate hit via LiteLLM. ShinyHunters and Lapsus$ are now publishing stolen data from both victims.

Three days after LiteLLM, TeamPCP hit the Telnyx Python SDK on PyPI. Malicious versions 4.87.1 and 4.87.2 hid a credential stealer inside WAV audio files. The RSA-4096 key is byte-for-byte identical to the LiteLLM payload.

Stolen Trivy credentials gave TeamPCP a PyPI publishing token for LiteLLM, the most popular LLM proxy in Python. Malicious versions ran on every Python process, not just LiteLLM imports, exfiltrating SSH keys, cloud credentials, and crypto wallets. Roughly 500,000 exfiltrations …

A 24-day supply chain campaign hit Aqua Security's Trivy scanner, 75 GitHub Actions tags, and 66+ npm packages. TeamPCP stole CI/CD secrets from 10,000+ workflows using memory scraping and spawned a self-propagating npm worm with decentralized C2. One payload wiped …