FBI Warns TeamPCP Compromised Developer Tools in Large-Scale Supply Chain Campaign Targeting Cloud Credentials

The FBI issued a FLASH alert on July 2 attributing a large-scale software supply chain campaign to a group it calls TeamPCP, which compromised widely used developer and security tools including Trivy, KICS, LiteLLM, and the Telnyx Python SDK to plant credential-stealing malware in CI/CD pipelines 1. The alert identifies four malware families: CanisterWorm and SANDCLOCK, which harvest AWS, GCP, and Azure credentials along with Kubernetes ServiceAccount tokens and SSH keys, and Mini Shai-Hulud and its Miasma variant, self-replicating worms that spread autonomously across npm and PyPI registries while poisoning configuration files 12. The FBI ties the campaign to exploitation of stale npm maintainer recovery-email domains and flags two GitHub repositories, tpcp-docs and docs-tpcp, created by the worm using stolen credentials 23. The indicator set, drawn from Palo Alto Unit 42 research, lists six IP addresses, 27 file hashes, and four CVEs, and the FBI states TeamPCP has published victim names on a leak site and threatened data disclosure as part of an extortion effort 13.