FBI Warns TeamPCP Trojans Developer Tools in Supply Chain Attacks

The FBI issued a FLASH warning that TeamPCP is carrying out large-scale software supply chain compromises by trojanizing trusted developer and security tools, including Trivy, KICS, LiteLLM, and the Telnyx Python SDK. The campaign is designed to infiltrate CI/CD pipelines, cloud infrastructure, and security workflows, then steal high-value secrets such as cloud access tokens, API keys, SSH keys, and Kubernetes secrets. Reporting tied to the alert describes TeamPCP as a financially motivated group whose operations show persistence and scale more commonly associated with advanced threat actors.

Authorities and researchers said the activity is linked to malware families including CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma, which were used to establish persistence, exfiltrate credentials, and spread access into downstream victim environments. The FBI said the group has also engaged in extortion, published victim names on a leak site, and collaborated with other threat actors, raising the risk that stolen credentials will be reused long after the initial compromise. Defenders were urged to rotate exposed secrets, pin GitHub Actions to verified commit SHAs, hunt for worm-created repositories, harden CI/CD environments, and review published indicators such as domains, IP addresses, hashes, and related CVEs.