FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks

TeamPCP has been conducting large-scale software supply chain attacks by trojanizing widely used developer and security tools (including Trivy, KICS, LiteLLM, and the Telnyx Python SDK) to steal cloud tokens, SSH keys, Kubernetes secrets, and deploy persistent backdoors and extortion, with FBI guidance and numerous IoCs (IPs, domains, file hashes) and CVEs provided in the report.