Supply-Chain

Diagram illustrating how TeamPCP compromised Trivy security scanner to backdoor LiteLLM Python package via CI/CD pipeline credential theft

How TeamPCP Poisoned Security Scanners to Backdoor LiteLLM

On March 24, 2026, threat actor TeamPCP published backdoored versions of the LiteLLM Python package (3.4M daily downloads) after compromising Trivy and Checkmarx security scanners to steal PyPI credentials from CI/CD pipelines. The malware harvested credentials, deployed Kubernetes worms, and established persistent C2 — all triggered by a Python .pth file that fires on every interpreter startup.

Poisoned Packages: How npm Lifecycle Scripts Became a Supply Chain Weapon

Microsoft Threat Intelligence published a technique profile on malicious npm lifecycle scripts — the mechanism behind Shai-Hulud 2.0, Contagious Interview, and multiple North Korean campaigns. This post breaks down how lifecycle scripts work as an attack vector, the real-world campaigns exploiting them, and a layered defense strategy for dev teams and CI/CD pipelines.