The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action
ID: c04203e9-680e-51b9-ac38-a0bca29059c4
STIX ID: report--c04203e9-680e-51b9-ac38-a0bca29059c4
Feed Name: Resecurity
Resecurity analyzed an acquired 152.5 GiB victim archive from the March 2026 LiteLLM/Trivy supply-chain compromise: a backdoored aquasecurity/trivy-action (attributed to TeamPCP/SANDCLOCK) executed on CI runners, escalated privileges and exfiltrated 415,427 per-run secret-capture files (19–24 Mar 2026) containing primarily GITHUB_TOKENs and numerous persistent cloud and registry credentials across 898 owners and 2,038 repositories; the report details capture composition, named affected organisations, indicators, detection guidance and remediation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.