TeamPCP

TeamPCP is a financially motivated cybercriminal group active since at least November 2025, also tracked as DeadCatx3, PCPcat, PersyPCP, ShellForce, Storm_2999, and UNC6780. Its operations combine automated exploitation of cloud-native infrastructure with software supply-chain compromises targeting security tools, developer environments, and AI infrastructure. Its targeting is broadly opportunistic rather than confined to a single industry, with victims identified in the United States, Canada, Serbia, South Korea, and the United Arab Emirates. TeamPCP exploits exposed or misconfigured Docker APIs, Kubernetes environments, Ray dashboards, and Redis servers, as well as React2Shell (CVE-2025-55182) in React/Next.js applications. Its shell and Python tooling automates internet scanning, exploitation, credential harvesting, resource discovery, and worm-like propagation. Within Kubernetes environments, it spreads to accessible pods and establishes persistence through privileged pods deployed across cluster nodes. Compromised infrastructure supports data theft, cryptocurrency mining, proxy services, ransomware deployment, and extortion. The group also publishes stolen information to pressure victims. In March 2026, TeamPCP compromised trusted open-source tooling, including Trivy and Checkmarx KICS. Credentials harvested through the Trivy compromise enabled it to publish malicious LiteLLM releases through PyPI. Those releases used Python startup execution to harvest cloud credentials and SSH keys without requiring applications to import LiteLLM. In May 2026, its Mini Shai-Hulud worm compromised hundreds of packages across npm and PyPI, extending its supply-chain operations into widely used developer and AI ecosystems. Public release of Shai-Hulud source code subsequently complicated attribution of campaigns using related malware; code reuse alone does not establish TeamPCP involvement. The separate October 2026 LiteLLM compromise has not been linked to TeamPCP.