build-pipeline-compromisepackage-repository-poisoningcredential-stealer-activitycredential-access-method

TeamPCP Supply-Chain Campaign Compromises CI/CD Tools to Steal Cloud Credentials

Supply Chain Risk · 2 sources · Updated 2mo ago · First seen Mar 27, 2026

The TeamPCP software supply-chain campaign compromised CI/CD tooling and packages including Trivy, KICS, LiteLLM, Telnyx, CanisterWorm, and more than 66 npm packages. Malicious code deployed TeamPCP Cloud Stealer to collect GitHub, cloud-provider, SSH, and package-manager credentials; on GitHub-hosted Linux runners, it dumped Runner.Worker process memory to extract secrets. Stolen credentials were reportedly reused to move between victims and expand the compromise chain.

The LiteLLM intrusion reportedly added Kubernetes lateral-movement features, Python .pth persistence, and exfiltration to attacker-created GitHub repositories. Organizations using affected build pipelines should rotate potentially exposed credentials, review CI/CD logs and runner activity for memory-dumping behavior and unauthorized repository access, and investigate package versions and build artifacts for tampering. Canary credentials placed in runner files, environment variables, and memory can provide early alerts when credential-stealing malware accesses or uses decoy secrets.

Does this reach your builds?Trace attribution and downstream blast radius.

Trace the chain

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

5 events · Mar 19, 2026 – Mar 27, 2026

Mar 27, 20267mo ago
Malicious Telnyx releases published to PyPI
Two malicious versions of the Telnyx PyPI package were reportedly published. The campaign assessment linked this compromise to credentials likely obtained from the previously compromised LiteLLM environment.
Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeille
Mar 24, 20267mo ago
Malicious LiteLLM releases published to PyPI
Two malicious versions of the LiteLLM PyPI package were reportedly published. The compromised payload included credential theft and Kubernetes-focused lateral-movement capabilities.
Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeille
Mar 23, 20267mo ago
KICS GitHub Actions and OpenVSX extensions compromised
GitHub Actions and OpenVSX extensions associated with Checkmarx's KICS scanner were reportedly compromised.
Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeille
Mar 22, 20267mo ago
CanisterWorm compromises more than 66 npm packages
Credentials stolen in the Trivy compromise were reportedly used to compromise more than 66 npm packages through the self-propagating CanisterWorm.
Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeille
Mar 19, 20268mo ago
Trivy GitHub Actions compromised
Several GitHub Actions associated with Aqua Security's Trivy scanner were reportedly compromised. Malicious Trivy versions were also published to Docker Hub as part of the campaign.
Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeille

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Threat actors

1 linked

TeamPCP

Malware

2 linked

TeamPCP Cloud stealer CanisterWorm

Affected products

1 linked

Trivy

Organizations

4 linked

LitellmCheckmarxAqua SecurityTelnyx

Do you run this?See attribution and downstream blast radius, and whether this package or vendor reaches your builds.

Trace the Supply Chain

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

CyberveilleNews · Sep 3, 2026

Campagne TeamPCP : compromission en chaîne de Trivy, KICS, LiteLLM et Telnyx via CI/CD | CyberVeilleOpen source ↗

UnclassifiedNews · Apr 2, 2026

Detecting CI/CD Supply Chain Attacks with Canary Credentials | TracebitOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

TeamPCP Supply-Chain Campaign Compromises CI/CD Tools to Steal Cloud Credentials

How this story unfolded

Malicious Telnyx releases published to PyPI

Malicious LiteLLM releases published to PyPI

KICS GitHub Actions and OpenVSX extensions compromised

CanisterWorm compromises more than 66 npm packages

Trivy GitHub Actions compromised

Related entities

Threat actors

Malware

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

TeamPCP Supply-Chain Attacks Poisoned Trivy, KICS, LiteLLM, Telnyx, and Bitwarden

TeamPCP Supply Chain Breaches Expand Into Ransomware-Linked OSS Campaign

FBI Warns TeamPCP Trojans Developer Tools in Supply Chain Attacks

TeamPCP Supply-Chain Campaign Compromises CI/CD Tools to Steal Cloud Credentials

How this story unfolded

Malicious Telnyx releases published to PyPI

Malicious LiteLLM releases published to PyPI

KICS GitHub Actions and OpenVSX extensions compromised

CanisterWorm compromises more than 66 npm packages

Trivy GitHub Actions compromised

Related entities

Threat actors

Malware

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

TeamPCP Supply-Chain Attacks Poisoned Trivy, KICS, LiteLLM, Telnyx, and Bitwarden

TeamPCP Supply Chain Breaches Expand Into Ransomware-Linked OSS Campaign

FBI Warns TeamPCP Trojans Developer Tools in Supply Chain Attacks