Executive Summary
The FBI has identified a sophisticated campaign by the cyber criminal group TeamPCP targeting the software supply chain through the compromise of widely used developer and security tools, including Trivy, KICS, and the Telnyx Python SDK. By injecting malicious code into legitimate packages, the group facilitates the automated theft of cloud access tokens, SSH keys, and Kubernetes secrets. TeamPCP has also been observed collaborating with other threat actors and using a public leak site for extortion.
The attack chain involves the deployment of specialized malware such as CanisterWorm and SANDCLOCK for credential harvesting, alongside self-propagating worms like Mini Shai-Hulud and Miasma that poison npm and PyPI registries. These tools allow the actors to maintain persistent access to developer environments and downstream enterprise systems.
This campaign poses a critical risk to organizations relying on automated CI/CD pipelines and cloud infrastructure. Compromised credentials and exfiltrated data represent a long-term persistent risk, as they are frequently weaponized for subsequent stages of attack or data disclosure.