TeamPCP Supply Chain Breaches Expand Into Ransomware-Linked OSS Campaign

TeamPCP has expanded a multi-ecosystem software supply chain campaign that compromised open-source security and developer tools including Trivy, Checkmarx KICS, LiteLLM, Telnyx, GitHub Actions, OpenVSX extensions, Docker images, and packages published through PyPI and npm. Reporting indicates the attackers used stolen developer and publishing credentials to push malicious releases through trusted channels, harvest environment variables, shell histories, cloud credentials, and GitHub tokens, and move laterally across CI/CD environments. In the Telnyx incident, valid credentials were reportedly used to publish malicious PyPI releases, with a second-stage payload hidden in a WAV file and code triggered on import.

The campaign is now being linked to follow-on ransomware activity through an alleged partnership between TeamPCP and the Vect ransomware group, which has been advertised on BreachForums as an emerging ransomware-as-a-service operation. Researchers say the supply chain compromises may serve as initial access for extortion campaigns against downstream organizations, with TeamPCP reportedly recruiting negotiators after the Trivy breach and previously exfiltrating roughly 300 GB of compressed credentials; the LiteLLM compromise alone was tied to hundreds of thousands of stolen credentials. The incidents underscore how compromised open-source tooling and CI/CD infrastructure can give attackers privileged enterprise access and create a path from package poisoning to ransomware deployment.