Threat Actor Activity26 Aug 2026·3 sources
TeamPCP Added Malware to 42 Microsoft-Linked GitHub Repositories in June
On 5 June 2026 TeamPCP used a compromised GitHub account to inject malicious code into at least 42 repositories and 236 branches in the Azure, Azure-Samples and Microsoft GitHub organisations, according to Wiz. The incident followed the group's earlier supply-chain compromises of Trivy, Checkmarx, LiteLLM and BerriAI and its Mini Shai-Hulud npm and PyPI campaign.
TeamPCPsupply-chainGitHub+2
