Threat Intelligence / Actor / TeamPCP

TeamPCP

As of 2026-08-25, TeamPCP is a threat actor tracked by Threadlinqs Intelligence across 2 threats spanning supply chain. Also known as Altered Spider, LAPSUS$ overlap, UNC6780.

2 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Altered Spider, LAPSUS$ overlap, Shai-Hulud operators, UNC6780

Tracked threats

Mini Shai-Hulud Resurfaces — intercom-client@7.0.4 npm Worm Harvesting GitHub & Cloud Credentials (TeamPCP) — CRITICAL
lightning PyPI Package Compromise — Versions 2.6.2 & 2.6.3 Execute Bun-Based JavaScript Credential Stealer on Import (Shai-Hulud-Overlapping) — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence