All news
threat actor activity

EdgeProtect

TeamPCP Added Malware to 42 Microsoft-Linked GitHub Repositories in June

On 5 June 2026 the group used a compromised GitHub account to push malicious code to 236 branches across the Azure, Azure-Samples and Microsoft organisations.

26 August 2026
TeamPCPsupply-chainGitHubMicrosoftAzure
TeamPCP Added Malware to 42 Microsoft-Linked GitHub Repositories in June

At a glance

1 target1 industry

Targets & victims

OrganisationSectorRegionStatus
MicrosoftTechnology-confirmed

Industries

Technology

Technology affected

Microsoft · ExchangeGitHub · GitHub

Malware & tooling

Malware

TeamPCP hits Microsoft-linked GitHub organisations

According to Wiz's Cloud Threat Landscape, TeamPCP leveraged a compromised GitHub account to inject malicious code into at least 42 repositories and 236 branches across the Azure, Azure-Samples and Microsoft GitHub organisations. The malicious commits were made between 02:36 and 03:22 UTC on 5 June 2026.

Wiz classifies the activity as a supply-chain attack. As of 14:00 UTC on 5 June, Wiz reported that the malicious code was present only in the GitHub repositories and had not been pushed to other distribution channels. Wiz has not published details of the malware's functionality.

Part of a broader TeamPCP campaign

TeamPCP, also tracked by Google as UNC6780, is a cybercrime actor that uses supply-chain compromise as a primary initial access vector. Google's Threat Intelligence Group reports that in late March 2026 TeamPCP claimed responsibility for compromising GitHub repositories and GitHub Actions linked to the Trivy vulnerability scanner, Checkmarx, LiteLLM and BerriAI, using them to deploy the SANDCLOCK credential stealer, and that Mandiant responded to numerous incident response engagements tied to that activity.

In May 2026, according to CERT-EU, TeamPCP's Mini Shai-Hulud campaign compromised over 160 npm and PyPI packages by abusing GitHub Actions cache poisoning and stolen OIDC tokens, affecting ecosystems including TanStack, Mistral AI, UiPath and OpenSearch. CERT-EU also reports that TeamPCP later published the Mini Shai-Hulud malware source code and that copycat actors adopted it, with four malicious npm packages using a clone of the leaked code reported on 17 May.

Key points

  • On 5 June 2026, between 02:36 and 03:22 UTC, TeamPCP pushed malicious code to at least 42 repositories and 236 branches in the Azure, Azure-Samples and Microsoft GitHub organisations via a compromised account.
  • Wiz reported that the code had not spread beyond GitHub as of 14:00 UTC that day and has not described the payload.
  • Google tracks TeamPCP as UNC6780; the group claimed the Trivy, Checkmarx, LiteLLM and BerriAI compromises in late March 2026.
  • CERT-EU attributes the May 2026 Mini Shai-Hulud campaign, which hit over 160 npm and PyPI packages, to TeamPCP.

Further reading & sources