Open-source software’s archenemy TeamPCP goes back further than anyone thought

TeamPCP is a long-running and highly active threat actor tied to widespread supply-chain attacks against open-source software spanning 2020–2025; researchers attribute over 1,000 compromised packages earlier in the year and a late-2025 ShadowRay exploitation that produced the first self-propagating botnet on hijacked AI infrastructure. Oligo Security linked multiple campaigns and aliases to the same IPs, domains and C2 infrastructure and observed rapid, AI-assisted payload evolution and adaptation, increasing the scale and speed of their operations.