TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th)

TeamPCP, a threat actor, launched a sophisticated supply chain campaign involving the malicious publication of compromised code extensions and SDKs across multiple platforms, including GitHub, npm, and PyPI. This campaign targeted organizations like GitHub, OpenAI, Microsoft, and Grafana Labs, leveraging trojanized extensions and SDKs to steal credentials and exfiltrate data. The incident highlights the risks associated with relying solely on publisher verification badges and underscores the need for robust security practices within CI/CD pipelines.