Back Feeds2.Feedburner

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot

Feeds2.Feedburner •Zeljka Zorz • March 30, 2026

TeamPCP’s destructive run of supply chain breaches has stopped, for now: it has been three days since the group published malicious versions of Telnyx’s SDK on PyPI, and there haven’t been reports of new open-source project compromises. Partnership with emerging RaaS operation “The prior operational cadence was aggressive – a new target every 1-3 days (Trivy [on] March 19, CanisterWorm [on] March 20-22, Checkmarx [on] March 23, LiteLLM [on] March 24, Telnyx [on] March 27),” … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TeamPCP Supply Chain Attacks Pause as Ransomware Focus Intensifies TeamPCP, a cybercriminal group, has halted its supply chain attacks for the first time since March 19, 2026. No new compromises have been reported in the last three days, following the malicious release of Telnyx's SDK on March 27. The group previously targeted multiple platforms, including Trivy, CanisterWorm, Checkmarx, and LiteLLM, with a rapid operational cadence of 1-3 days between attacks. Analysts suggest that this pause indicates a shift in focus towards monetizing stolen credentials rather than expanding their supply chain operations. TeamPCP has amassed around 300 GB of stolen data, which could still lead to future compromises. Organizations are advised to maintain heightened monitoring and implement credential rotations. The CISA KEV remediation deadline for CVE-2026-33634 is approaching on April 8, 2026. Detection rules have been published to identify TeamPCP-style attacks at a behavioral level, emphasizing the need for proactive security measures. 2 sources 58

Extracted Entities

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)