Tag: teamPCP

CISA KEV Additions, TeamPCP Supply Chain Attacks, and Critical Infrastructure Under Fire

CISA confirmed active exploitation of a critical F5 BIG-IP vulnerability, while Citrix NetScaler faces reconnaissance for a CVSS 9.3 flaw. TeamPCP threat actors have expanded their supply chain campaign to target PyPI packages.

Mar 28, 2026The Hacker News, Microsoft Security, SANS ISC, MSRC Security Updates

cvecisa-kevsupply-chain

🇷🇺Star Blizzard

🇺🇸Apple

highMalware & Threats

TeamPCP Trojans LiteLLM Package in Supply Chain Attack

TeamPCP threat actors compromised the popular LiteLLM Python package, injecting malware into versions 1.82.7 and 1.82.8 that steals cloud credentials and secrets. The attack uses Python's .pth mechanism for stealthy persistence across package installations.

Mar 25, 2026Wiz Blog

supply-chainpythonteampcp