Threat Intelligence / Actor / TeamPCP (Shai-Hulud operators)

TeamPCP (Shai-Hulud operators)

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: TeamPCP, Shai-Hulud, Shai-Hulud Third Coming, Sandworm-of-npm (informal)

Tracked threats

Bitwarden CLI npm Supply Chain Compromise (@bitwarden/cli v2026.4.0) — Shai-Hulud: The Third Coming / TeamPCP — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence