Weaponizing the Protectors: TeamPCPs Multi-Stage Supply Chain Attack on Security Infrastructure
Essential information
- Published
- 01/04/2026 02:05
- Modified
- 01/04/2026 10:24
- Tags
- 2026-04-01 CVE-2025-55182 canisterworm supply chain attack teampcp wiper
- Related entities
- 1 vulnerabilities (cve), 36 observables, 1 intrusion sets (apt), 1 malware, 6 others
Description
Between late February and March 2026, threat group TeamPCP conducted a highly calculated, escalating sequence of supply chain threats. It systematically compromised widely trusted open-source security tools, including the vulnerability scanners Trivy and KICS and the popular AI gateway LiteLLM. The affected software also includes the official Python SDK of Telnyx.