Executive Summary
TeamPCP conducted a high-impact supply chain campaign between March 19 and March 27, 2025, compromising major open-source tools including Aqua Security’s Trivy, Checkmarx’s KICS, LiteLLM, and Telnyx. The campaign was characterized by a 'snowball' effect where stolen credentials from one victim were used to pivot and compromise the next target's development infrastructure.
Technically, the actor deployed a self-propagating worm dubbed 'CanisterWorm' and a specialized 'Cloud Stealer' malware. These tools targeted GitHub-hosted runners to dump process memory and scraped filesystem paths for cloud, SSH, and package manager tokens. In advanced stages, the malware attempted lateral movement within Kubernetes clusters by creating privileged pods to mount host filesystems.
This campaign highlights the extreme risk of CI/CD credential exfiltration, with LiteLLM alone resulting in the exfiltration of 300GB of data from approximately 500,000 infected machines. Organizations must move beyond basic pinning and implement detective controls, such as canary credentials, to identify when secrets have been compromised.