FlagThis

Abstract

The recent TeamPCP campaign demonstrates how attackers are targeting trusted software supply chain components—specifically CI/CD and release mechanisms linked to the Trivy ecosystem—to compromise downstream packages like LiteLLM. By abusing legitimate development and distribution channels, the threat actor delivers malicious code, harvests credentials, and can pivot from build environments into broader enterprise infrastructure, highlighting a shift from isolated package tampering to broad trust‑mechanism exploitation.