Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure
Summary: Between late February and March 2026, the threat group TeamPCP compromised open-source security tools including Trivy, KICS, LiteLLM and the Telnyx Python SDK, injecting infostealer payloads into GitHub Actions and PyPI. Sources cited in the report, such as vx-underground, believe the group has already exfiltrated 300 GB of data and secrets from 500,000 infected machines.
Bottom line: The operation weaponized the scanners and gateways organizations trust to defend themselves, and the group announced compromise of at least 16 organizations as of late March - meaning the tools you rely on for assurance were the delivery mechanism.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Supply Chain & AppSec
- Mentions
- CVE-2025-55182
- Related
- CVE-2025-55182: Meta React Server Components Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 05, 2025