Frequency
3
occurrences
First Seen
March 24, 2026
Last Seen
May 20, 2026
Related Threat Clusters
-
TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack
The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…
11 articles · Updated May 20, 2026 -
LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP
On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited…
53 articles · Updated March 24, 2026 -
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…
149 articles · Updated May 20, 2026
Recent Intelligence Reports
- Teampcp Expands Supply Chain Compromise Spreads From Trivy To Checkmarx Github Actions — www.sysdig.com · May 20, 2026
- GitHub investigates internal repositories breach claimed by TeamPCP — Bleepingcomputer · May 20, 2026
- Popular LiteLLM PyPI package compromised in TeamPCP supply chain attack — Bleepingcomputer · March 24, 2026