TeamPCP Supply Chain Attack Campaign Targets Trivy, Checkmarx (KICS), and LiteLLM (Potential Downstream Impact to Additional Projects)

### Executive summary TeamPCP conducted a coordinated supply-chain campaign by stealing CI/CD secrets and signing credentials to compromise Trivy, Checkmarx GitHub Actions, and LiteLLM PyPI packages, distributing credential-stealing backdoors and worm-like propagation mechanisms that risk widespread downstream compromise; vendors have removed malicious artifacts and Arctic Wolf recommends reverting to safe versions, rotating credentials, monitoring SBOMs and build logs, and deploying detection agents.