Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
FBI Warns TeamPCP Supply Chain Campaign Puts Developer Environments and Cloud Credentials at Risk
Threat Actors
Malware Families
Excerpt
In 2026, the FBI issued a critical warning regarding a massive software supply chain campaign orchestrated by the threat group TeamPCP. This sophisticated attack compromised trusted software distribution channels, allowing hackers to inject malicious code into widely used enterprise development tools. By weaponizing these entry points, the threat actors successfully introduced malicious code into victim environments at an unprecedented scale. TeamPCP specifically targeted…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-45321 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-33634 | Medium | Score 54/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| CVE | CVE-2026-48027 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…