Quick links
Press Enter to search, Esc to close
Threat group profile
The US FBI (July 2026) describes TeamPCP as a cyber criminal group behind large-scale software supply chain compromises of widely used developer and security tools.
In short
The US FBI (July 2026) describes TeamPCP as a cyber criminal group behind large-scale software supply chain compromises of widely used developer and security tools. Australian and US authorities announced arrests and an indictment linked to the group in August 2026, and MITRE ATT&CK describes it as active since at least September 2025.
Public reports use several names for this activity.
| Name | Where it appears |
|---|---|
| TeamPCP | MITRE ATT&CK G1056 (group name); FBI FLASH of 2 July 2026; BSI warning of 26 March 2026; CERT-EU; US Department of Justice press release[1, 5, 6, 8, 12] |
| PCPCat | MITRE ATT&CK G1056 Associated Groups[1] |
| ShellForce | MITRE ATT&CK G1056 Associated Groups[1] |
| DeadCatx3 | MITRE ATT&CK G1056 Associated Groups[1] |
| SHADOW-WATER-058 | MITRE ATT&CK G1056 Associated Groups[1] |
| UNC6780 | MITRE ATT&CK G1056 Associated Groups[1] |
Attribution is a judgment by the body named. It is shown here as attributed, not as proven fact.
BSI (Germany) 26 March 2026
In its warning on the Trivy attack, said the group TeamPCP is said to stand behind the supply chain attacks, which it described as touching GitHub Actions, Docker Hub, npm (CanisterWorm), OpenVSX and PyPI.[12]
CERT-EU 1 April 2026
Cyber Brief 26-04 calls TeamPCP a cybercrime actor that reportedly compromised Trivy, LiteLLM and the Telnyx Python package. The brief says its attributions only reflect public reporting, not CERT-EU's stance.[9]
CERT-EU 2 April 2026
Assessed with high confidence that the European Commission cloud breach started with the Trivy supply-chain compromise, which it describes as publicly attributed to TeamPCP.[8]
CERT-EU 2 June 2026
Cyber Brief 26-06 says TeamPCP's Mini Shai-Hulud worm compromised over 160 npm and PyPI packages, and that copycat actors adopted the malware after its source code was published.[10]
FBI 2 July 2026
FLASH-20260702-01 describes TeamPCP as a cyber criminal group that carried out large-scale software supply chain compromises, and lists its malware and indicators. Coordinated with CISA.[5]
MITRE ATT&CK 16 July 2026
Describes TeamPCP (G1056) as a financially motivated, cloud-native group active since at least September 2025. Group page version 1.0, created 16 July 2026.[1]
US Department of Justice 27 August 2026
Announced an indictment for cyberattacks conducted in spring 2026 "under the moniker TeamPCP". The indictment was filed on 25 August and unsealed on 26 August.[6]
Australian Federal Police with FBI 27 August 2026
Charged two men over an alleged cybercrime syndicate. An FBI official said the men are allegedly members of the cybercriminal group TeamPCP.[7]
CERT-EU 3 September 2026
Cyber Brief 26-09 reports the Australian arrests of two alleged members of TeamPCP.[11]
Sources differ in how firmly they name the group. CERT-EU writes "reportedly" and says its briefs only reflect public reporting, and it describes the Trivy attribution as made publicly by others. The BSI says the group is said to be behind the attacks. The FBI states it as the subject of its FLASH. The US Department of Justice says the attacks were carried out "under the moniker TeamPCP", and the Australian release names the group only through an FBI quote. An indictment and charges are allegations until proven in court. The CISA catalog entry for the Trivy flaw does not name any actor.
Each entry is attributed to the group by the sources cited.
MITRE ATT&CK describes TeamPCP as active since at least September 2025, first focused on ransomware and cryptocurrency theft.[1]
The Trivy maintainers say the March incident continued an attack that began in late February 2026. Credential rotation after the 1 March disclosure was not atomic, so access may have remained.[15]
The Trivy maintainers report malicious Trivy v0.69.5 and v0.69.6 images on Docker Hub.[15]
CERT-EU says TeamPCP reportedly uploaded malicious Telnyx versions 4.87.1 and 4.87.2 to PyPI.[9]
CERT-EU says the extortion group ShinyHunters published the data taken from the Commission account on its leak site.[8]
CERT-EU says TeamPCP published its own malware code to GitHub and independent actors began copying it.[10]
CERT-EU says GitHub began investigating access to internal repositories after an employee installed a malicious VS Code extension; TeamPCP reportedly claimed the theft.[10]
CISA lists CVE-2026-45321, which allowed malicious TanStack versions to be published to npm.[14]
The FBI publishes FLASH-20260702-01 with tactics, malware names and indicators.[5]
Indictments, sanctions and advisories that name the group or its alleged members.
| Date | Who | What |
|---|---|---|
| 26 Mar 2026 | CISA | Known exploited vulnerabilities alertAdded CVE-2026-33634 (Trivy embedded malicious code) to its catalog. The entry does not name an actor.[13, 14] |
| 26 Mar 2026 | BSI | Security warning (BITS-V 2026-237970-1032)Warned of the Trivy compromise, named TeamPCP as said to be behind it, and advised returning to clean versions and rotating secrets.[12] |
| 1 Apr 2026 | CERT-EU | Cyber Brief 26-04Reported TeamPCP's Trivy, LiteLLM and Telnyx compromises, with the caveat that it reflects public reporting.[9] |
| 2 Apr 2026 | CERT-EU | Blog on the European Commission cloud breachAssessed with high confidence that Trivy was the initial access and listed actions for defenders.[8] |
| 27 May 2026 | CISA | Known exploited vulnerabilities alertListed CVE-2026-45321 (TanStack) in its catalog. The entry does not name an actor.[14] |
| 2 Jun 2026 | CERT-EU | Cyber Brief 26-06Reported the Mini Shai-Hulud worm and its copycats.[10] |
| 2 Jul 2026 | FBI (coordinated with CISA) | FLASH-20260702-01Described TeamPCP's tactics and malware, listed indicators and set out recommendations.[5] |
| 25 Aug 2026 | US Department of Justice, Northern District of California | IndictmentIndicted one man on conspiracy and computer fraud charges over TeamPCP attacks; filed 25 August, unsealed 26 August, announced 27 August.[6] |
| 26 Aug 2026 | Australian Federal Police with Western Australia Police and FBI | Arrests and chargesSearched properties in Perth, arrested two men and charged them with 14 offenses in total; further arrests were not ruled out.[7] |
Techniques reported for this group, by MITRE ATT&CK tactic.
Supply Chain Compromise: Compromise Software Dependencies and Development Tools T1195.001
Attacked npm, VS Code, Docker and PyPI to compromise many software packages.[1]
Valid Accounts: Cloud Accounts T1078.004
Used stolen GitHub and package registry credentials, including privileged service accounts, to inject code into pipelines.[1]
Exploit Public-Facing Application T1190
Exploited GitHub Actions misconfigurations and CVE-2026-33634 in Trivy, and CVE-2025-55182 against cloud endpoints.[1]
Steal Application Access Token T1528
Stole access tokens from cloud and developer environments.[1]
Credentials from Password Stores: Cloud Secrets Management Stores T1555.006
Took cloud secrets from AWS, GCP and Azure.[1]
Unsecured Credentials: Private Keys T1552.004
Extracted SSH and GPG keys from victim environments.[1]
TeamPCP Cloud Stealer Credential stealer
MITRE describes it as a filesystem stealer that harvests, encrypts and sends out credentials from over 50 sensitive paths, used in March 2026. The FBI lists the same tool as SANDCLOCK.[2, 5]
CanisterWorm Self-propagating worm
Uses npm credentials to infect packages. MITRE notes a wiper component and command and control through an Internet Computer blockchain canister.[3, 5, 12]
Mini Shai-Hulud Supply chain worm
MITRE describes a credential stealer and self-replicating worm derived from Shai-Hulud that uses stolen npm and GitHub OIDC tokens. The FBI calls it cross-ecosystem (npm and PyPI).[4, 5, 10]
Miasma Worm (variant)
The FBI describes it as a variant of Mini Shai-Hulud that spreads across registries such as npm and PyPI and poisons configuration files.[5]
TruffleHog Secret-scanning tool
CERT-EU says the actor launched this legitimate scanner against the Commission account to look for more secrets.[8]
Set a minimum package age, for example 7 days, so freshly published bad versions are not installed at once.
Counters T1195.001
Follow new government advisories on TeamPCP, the names and tools the sources attribute to it, and any targeting of your sector or software supply chain.
Watch for leak-site posts and forum offers that mention your organization, as the FBI says the group publishes victim names and threatens to release stolen data.
See which of your public code, package and cloud assets are exposed, including look-alike domains that mimic your tools.
Spot look-alike domains of your projects, the kind MITRE describes the group registering to hide command and control.
The FBI (2 July 2026) describes TeamPCP as a cyber criminal group behind large-scale software supply chain compromises. MITRE ATT&CK describes it as financially motivated and active since at least September 2025. CERT-EU says "reportedly" in its briefs.
The FBI says it modified Trivy, KICS, LiteLLM and the Telnyx Python SDK. CERT-EU and MITRE also report the Mini Shai-Hulud worm, which hit TanStack and other npm and PyPI packages in May 2026.
The Australian Federal Police charged two men on 26 August 2026 and the US Department of Justice announced an indictment of one man on 27 August 2026. These are allegations, and the AFP said the investigation continues.
CERT-EU assessed with high confidence that a European Commission cloud account was reached through the Trivy supply-chain compromise, which it describes as publicly attributed to TeamPCP. CERT-EU said data tied to at least 29 other EU entities may be affected.
Pin GitHub Actions to full commit hashes, rotate secrets that pipelines could reach, and search for repositories named tpcp-docs or docs-tpcp, as the FBI and BSI advise.
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.