# TeamPCP

> As of 2026-10-07, TeamPCP is a N/A-nexus threat actor tracked by Threadlinqs Intelligence across 53 threats spanning supply chain, threat intel, ransomware. Also known as Altered Spider, TGR-CRI-1135, UNC6780, Replicating Marauder. ATT&CK coverage spans 209 techniques across 15 tactics in 53 of 53 tracked threats. Most-observed techniques: T1027 (Obfuscated Files or Information), T1005 (Data from Local System), T1528 (Steal Application Access Token).

- **Nation:** N/A
- **Tracked threats:** 53
- **Categories:** SUPPLY_CHAIN, THREAT_INTEL, RANSOMWARE, MALWARE, APT, VULNERABILITY
- **Also known as:** Altered Spider, TGR-CRI-1135, UNC6780, Replicating Marauder, Shai-Hulud, Miasma, Mini Shai-Hulud, Miasma operator, Mini Shai-Hulud operator, Shai-Hulud lineage, Shai-Hulud framework author, Mini Shai-Hulud operators
- **As of:** 2026-10-07

## ATT&CK techniques observed

209 techniques observed across 53 of 53 tracked threats. Tactics: Stealth (formerly Defense Evasion) (28), Command and Control (21), Credential Access (20), Execution (20), Persistence (19), Resource Development (18).

- [T1027](https://intel.threadlinqs.com/technique/T1027) Obfuscated Files or Information — Stealth (formerly Defense Evasion) — observed in 44 of 53 tracked threats
- [T1005](https://intel.threadlinqs.com/technique/T1005) Data from Local System — Collection — observed in 41 of 53 tracked threats
- [T1528](https://intel.threadlinqs.com/technique/T1528) Steal Application Access Token — Credential Access — observed in 39 of 53 tracked threats
- [T1195](https://intel.threadlinqs.com/technique/T1195) Supply Chain Compromise — Initial Access — observed in 38 of 53 tracked threats
- [T1041](https://intel.threadlinqs.com/technique/T1041) Exfiltration Over C2 Channel — Exfiltration — observed in 31 of 53 tracked threats
- [T1036](https://intel.threadlinqs.com/technique/T1036) Masquerading — Stealth (formerly Defense Evasion) — observed in 30 of 53 tracked threats
- [T1059](https://intel.threadlinqs.com/technique/T1059) Command and Scripting Interpreter — Execution — observed in 30 of 53 tracked threats
- [T1082](https://intel.threadlinqs.com/technique/T1082) System Information Discovery — Discovery — observed in 28 of 53 tracked threats
- [T1552](https://intel.threadlinqs.com/technique/T1552) Unsecured Credentials — Credential Access — observed in 28 of 53 tracked threats
- [T1567](https://intel.threadlinqs.com/technique/T1567) Exfiltration Over Web Service — Exfiltration — observed in 27 of 53 tracked threats
- [T1552.001](https://intel.threadlinqs.com/technique/T1552.001) Unsecured Credentials — Credential Access — observed in 26 of 53 tracked threats
- [T1105](https://intel.threadlinqs.com/technique/T1105) Ingress Tool Transfer — Command and Control — observed in 25 of 53 tracked threats
- [T1199](https://intel.threadlinqs.com/technique/T1199) Trusted Relationship — Initial Access — observed in 24 of 53 tracked threats
- [T1083](https://intel.threadlinqs.com/technique/T1083) File and Directory Discovery — Discovery — observed in 23 of 53 tracked threats
- [T1195.002](https://intel.threadlinqs.com/technique/T1195.002) Compromise Software Supply Chain — Initial Access — observed in 21 of 53 tracked threats

## Tracked threats

- [Mini Shai-Hulud: Compromised @antv npm Packages Steal Developer and CI/CD Credentials (TeamPCP)](https://intel.threadlinqs.com/threat/TL-2026-2806) — HIGH
- [Re-Enabled actions-cool GitHub Actions (issues-helper, maintain-one-comment) Resume Executing Mini Shai-Hulud CI/CD Credential-Theft Payload](https://intel.threadlinqs.com/threat/TL-2026-2661) — HIGH
- [Google Cloud Threat Intelligence: Supply Chain Compromise Campaigns and Mitigation Guidance (2025-2026)](https://intel.threadlinqs.com/threat/TL-2026-2657) — HIGH
- [Open-Source Supply Chain Poisoning Campaigns Drive CrowdStrike Endpoint-Based Package Interception](https://intel.threadlinqs.com/threat/TL-2026-2294) — HIGH
- [ChainDrop/Mini Shai-Hulud npm Worm Compromises keyv, cacheable, and 400+ Downstream Packages via Ethereum-Resolved C2](https://intel.threadlinqs.com/threat/TL-2026-2285) — CRITICAL
- [npm Supply-Chain Compromise: @7nohe/openapi-react-query-codegen Ships "Trinitite" Credential-Harvesting Worm](https://intel.threadlinqs.com/threat/TL-2026-2193) — CRITICAL
- [Shai-Hulud npm Supply-Chain Worm: Two Alleged TeamPCP Members Charged by AFP/FBI](https://intel.threadlinqs.com/threat/TL-2026-2186) — CRITICAL
- [StepSecurity Dev Machine Guard adds fleet-wide developer credential inventory to close blind spot exploited by supply-chain attacks](https://intel.threadlinqs.com/threat/TL-2026-2160) — INFO
- [ChainDrop npm Supply-Chain Compromise: Self-Propagating Mini Shai-Hulud Credential-Stealing Worm Affecting 444+ Packages](https://intel.threadlinqs.com/threat/TL-2026-1875) — CRITICAL
- [Shai-Hulud NPM Worm Compromises keyv, file-entry-cache, flat-cache and Hundreds of Popular npm Packages via Maintainer Account Takeover](https://intel.threadlinqs.com/threat/TL-2026-1863) — CRITICAL
- [Keyv and Cacheable npm Supply Chain Attack via Compromised Maintainer Account (Shai-Hulud Malware)](https://intel.threadlinqs.com/threat/TL-2026-1861) — CRITICAL
- [Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack](https://intel.threadlinqs.com/threat/TL-2026-1860) — CRITICAL
- [Ransomware Groups Exploit Citrix Bleed 2 (CVE-2025-5777) and Kontron Driver BYOVD for Access and Privilege Escalation](https://intel.threadlinqs.com/threat/TL-2026-1086) — CRITICAL
- [TeamPCP Malware Injection into Microsoft-Linked GitHub Repositories (42+ repos, 236 branches, 2026-06-05)](https://intel.threadlinqs.com/threat/TL-2026-0981) — CRITICAL
- [Miasma Supply Chain Attack Toolkit Open-Sourced on GitHub (Shai-Hulud / Mini Shai-Hulud Variant)](https://intel.threadlinqs.com/threat/TL-2026-0736) — CRITICAL
- [Shai-Hulud 'Hades' Campaign — Trojanized PyPI Packages Auto-Execute Bun Credential Stealer via Python Wheel Startup Hooks (*-setup.pth)](https://intel.threadlinqs.com/threat/TL-2026-0734) — CRITICAL
- [Miasma Worm Compromises 73 Microsoft GitHub Repositories Across Azure, Azure-Samples, Microsoft & MicrosoftDocs — Self-Replicating Mini Shai-Hulud Variant Weaponizing AI Coding Agents (TeamPCP)](https://intel.threadlinqs.com/threat/TL-2026-0719) — CRITICAL
- [Shai-Hulud "Hades" Miasma Worm — New PyPI Wave: 37 Malicious Wheels Across 19 Packages Abuse *-setup.pth Startup Hook to Launch Bun-Powered Credential Stealer](https://intel.threadlinqs.com/threat/TL-2026-0709) — CRITICAL
- [Binding.gyp "Phantom Gyp" Supply Chain Attack (Miasma Worm) Enables CI/CD Worm Propagation Across 57 npm Packages](https://intel.threadlinqs.com/threat/TL-2026-1234) — HIGH
- [Miasma: Supply Chain Compromise in RedHat npm Packages - Credential Harvesting Malware](https://intel.threadlinqs.com/threat/TL-2026-0983) — CRITICAL
- [Miasma — @redhat-cloud-services npm Supply Chain Compromise (Mini Shai-Hulud Variant, GitHub Actions OIDC/SLSA Abuse with GCP/Azure Cloud-Identity Theft)](https://intel.threadlinqs.com/threat/TL-2026-0643) — CRITICAL
- [durabletask PyPI Supply Chain Compromise (v1.4.1–1.4.3) — Microsoft-Published Azure Durable Functions SDK Trojanized w/ Cross-Cloud Credential Stealer + Linux Disk Wiper (TeamPCP / Mini Shai-Hulud)](https://intel.threadlinqs.com/threat/TL-2026-0580) — CRITICAL
- [Nx Console VS Code Extension Backdoored (v18.95.0) — TeamPCP Mini Shai-Hulud Pivot from TanStack npm Worm to GitHub Internal Repository Breach (CVE-2026-48027)](https://intel.threadlinqs.com/threat/TL-2026-0547) — CRITICAL
- [GitHub Internal Breach — TeamPCP Exfiltrates 3,800+ Repos via Poisoned VS Code Extension Tied to Mini Shai-Hulud Worm](https://intel.threadlinqs.com/threat/TL-2026-0536) — CRITICAL
- [TeamPCP @antv Supply Chain Wave — Mini Shai-Hulud Multi-Ecosystem npm/GitHub Actions/VSCode Compromise](https://intel.threadlinqs.com/threat/TL-2026-0530) — CRITICAL
- [Backdoored Cemu v2.6 GitHub Release — TeamPCP Supply Chain Campaign Extends to Cemu Nintendo Wii U Emulator (cemu-project/Cemu)](https://intel.threadlinqs.com/threat/TL-2026-0515) — HIGH
- [Mini Shai-Hulud v3 — TanStack/UiPath/Mistral AI npm & PyPI Supply Chain Compromise (TeamPCP)](https://intel.threadlinqs.com/threat/TL-2026-0499) — CRITICAL
- [GTIG AI Threat Tracker (May 2026) — First AI-Developed Zero-Day Exploit (2FA Bypass), PROMPTFLUX/HONESTCUE/CANFAIL/LONGSTREAM/PROMPTSPY AI-Enabled Malware, and APT27/APT45/UNC2814/UNC5673/UNC6201/TeamPCP AI-Augmented Operations](https://intel.threadlinqs.com/threat/TL-2026-0495) — HIGH
- [Checkmarx Jenkins AST Plugin Supply Chain Compromise — TeamPCP Backdoored Plugin on Jenkins Marketplace](https://intel.threadlinqs.com/threat/TL-2026-0492) — HIGH
- [Mini Shai-Hulud Resurfaces — intercom-client@7.0.4 npm Worm Harvesting GitHub & Cloud Credentials (TeamPCP)](https://intel.threadlinqs.com/threat/TL-2026-0446) — CRITICAL
- [lightning PyPI Package Compromise — Versions 2.6.2 & 2.6.3 Execute Bun-Based JavaScript Credential Stealer on Import (Shai-Hulud-Overlapping)](https://intel.threadlinqs.com/threat/TL-2026-0444) — CRITICAL
- [SAP CAP & Cloud MTA npm Packages Compromised — Mini Shai-Hulud (TeamPCP) Bun-Based Credential Stealer](https://intel.threadlinqs.com/threat/TL-2026-0439) — CRITICAL
- [Xinference PyPI Supply Chain Compromise — TeamPCP-Marked Credential Harvester (v2.6.0–2.6.2)](https://intel.threadlinqs.com/threat/TL-2026-0438) — CRITICAL
- [VECT Ransomware 2.0 — Russian-Speaking RaaS with ChaCha20 Buffer-Reuse Bug Producing Permanent Data Destruction (Wiper-by-Accident) Across Windows, Linux, and ESXi](https://intel.threadlinqs.com/threat/TL-2026-0432) — CRITICAL
- [Bitwarden CLI npm Supply Chain Compromise (@bitwarden/cli v2026.4.0) — Shai-Hulud: The Third Coming / TeamPCP](https://intel.threadlinqs.com/threat/TL-2026-0429) — CRITICAL
- [Bitwarden CLI Hijacked in npm Supply Chain Attack Linked to TeamPCP & Checkmarx Breach](https://intel.threadlinqs.com/threat/TL-2026-0425) — CRITICAL
- [Coordinated supply chain attacks on Checkmarx and Bitwarden developer tools sharing audit.checkmarx.cx C2 infrastructure](https://intel.threadlinqs.com/threat/TL-2026-0424) — HIGH
- [Bitwarden CLI 2026.4.0 (@bitwarden/cli) Compromised via Abused GitHub Action in Ongoing Checkmarx Supply Chain Campaign](https://intel.threadlinqs.com/threat/TL-2026-0417) — CRITICAL
- [Telnyx Python SDK PyPI Compromise — TeamPCP CanisterWorm Supply Chain Attack (telnyx 4.87.1/4.87.2)](https://intel.threadlinqs.com/threat/TL-2026-0361) — CRITICAL
- [Escalating Kubernetes Attacks: React2Shell (CVE-2025-55182), Slow Pisces, and Cloud-Native Threat Actors](https://intel.threadlinqs.com/threat/TL-2026-0327) — CRITICAL
- [TeamPCP LiteLLM Supply Chain Attack — Trojaned PyPI Packages (v1.82.7/1.82.8) with Multi-Stage C2 Payload](https://intel.threadlinqs.com/threat/TL-2026-0304) — CRITICAL
- [TeamPCP Cascading Supply Chain Campaign: Telnyx PyPI Compromise with WAV Steganography](https://intel.threadlinqs.com/threat/TL-2026-0299) — CRITICAL
- [TeamPCP Supply Chain Attack via Backdoored Telnyx PyPI Package with Steganographic WAV Payloads](https://intel.threadlinqs.com/threat/TL-2026-0298) — CRITICAL
- [LiteLLM Supply Chain Compromise — TeamPCP Multi-Ecosystem Campaign via Trojanized PyPI Packages](https://intel.threadlinqs.com/threat/TL-2026-0290) — CRITICAL
- [TeamPCP Partners With Vect Ransomware Group to Escalate Cross-Ecosystem Open Source Supply Chain Attacks](https://intel.threadlinqs.com/threat/TL-2026-0288) — CRITICAL
- [TeamPCP Supply Chain Attack on LiteLLM — Trojanized PyPI Packages with .pth Persistence and Multi-Stage Credential Stealer](https://intel.threadlinqs.com/threat/TL-2026-0281) — CRITICAL
- [Trivy Supply Chain Compromise — TeamPCP Credential-Stealing Malware Injected into CI/CD Pipelines (CVE-2026-33634)](https://intel.threadlinqs.com/threat/TL-2026-0280) — CRITICAL
- [TeamPCP Supply Chain Campaign: LiteLLM PyPI Compromise, CanisterWorm npm Propagation, and Multi-Ecosystem Attack (CVE-2026-33634)](https://intel.threadlinqs.com/threat/TL-2026-0279) — CRITICAL
- [Checkmarx KICS GitHub Action Supply Chain Compromise by TeamPCP (kics-github-action Tag Hijacking)](https://intel.threadlinqs.com/threat/TL-2026-0274) — CRITICAL
- [Trivy Supply Chain Attack — Credential Theft Infostealer via Malicious GitHub Actions Tags (GHSA-69fq-xp46-6x23)](https://intel.threadlinqs.com/threat/TL-2026-0270) — CRITICAL
- [Trivy Ecosystem Supply Chain Compromise — Infostealer via Hijacked GitHub Actions and Container Images (CWE-506)](https://intel.threadlinqs.com/threat/TL-2026-0263) — CRITICAL
- [CanisterWorm npm Supply Chain Compromise — Worm-Enabled Backdoor Across 29+ Packages via Publisher Credential Theft](https://intel.threadlinqs.com/threat/TL-2026-0259) — HIGH
- [Trivy Supply Chain Compromise by TeamPCP — Credential-Stealing Malware in v0.69.4, trivy-action, and setup-trivy GitHub Actions](https://intel.threadlinqs.com/threat/TL-2026-0256) — CRITICAL

## Related CVEs

8 CVEs referenced by tracked TeamPCP activity.

- [CVE-2026-48027](https://intel.threadlinqs.com/cve/CVE-2026-48027)
- [CVE-2026-45321](https://intel.threadlinqs.com/cve/CVE-2026-45321)
- [CVE-2026-33634](https://intel.threadlinqs.com/cve/CVE-2026-33634)
- [CVE-2026-26189](https://intel.threadlinqs.com/cve/CVE-2026-26189)
- [CVE-2025-5777](https://intel.threadlinqs.com/cve/CVE-2025-5777)
- [CVE-2025-55182](https://intel.threadlinqs.com/cve/CVE-2025-55182)
- [CVE-2025-29927](https://intel.threadlinqs.com/cve/CVE-2025-29927)
- [CVE-2023-48022](https://intel.threadlinqs.com/cve/CVE-2023-48022)

## Full data

Infrastructure, IOC values and detection queries (Splunk SPL / Microsoft KQL / Sigma) require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/actor/TeamPCP