TeamPCP hits Microsoft's GitHub orgs with new malware
TeamPCP compromised a GitHub account to inject malicious code into at least 42 repositories and 236 branches across the Azure, Azure-Samples and Microsoft GitHub organizations. The trojanized packages were published between 02:36 and 02:41 UTC on June 5, 2026.
WIZ Cloud Threat Landscape identifies the operation as a supply-chain attack with initial access via the GitHub vector.
The new malware: what it does and where it lands
The payload is a new variant in TeamPCP’s toolkit, delivered through trojanized GitHub packages. It targets developer environments, where it harvests credentials and tokens that grant downstream access to connected services and repositories.
TeamPCP published the malware source code to GitHub, a move that has already triggered copycat adoption. Independent actors have begun modifying the code and expanding its reach, with the first copycat deployment observed in four malicious npm packages uploaded via typosquatting.
Part of a broader TeamPCP campaign wave
This is the latest in a sustained TeamPCP campaign wave. The group, also tracked as UNC6780, is a cybercrime actor that has made supply-chain compromise its primary initial access vector, trojanizing trusted packages to deploy credential stealers and infostealers into developer environments.
The Microsoft GitHub orgs hit here follow TeamPCP’s Mini Shai-Hulud worm, which compromised over 160 npm and PyPI packages in May 2026. That campaign abused GitHub Actions cache poisoning and stolen OIDC tokens to publish malicious updates, impacting ecosystems tied to TanStack, Mistral AI, UiPath, and OpenSearch.
The same actor also claimed responsibility in late March 2026 for supply-chain compromises of the Trivy vulnerability scanner, Checkmarx, LiteLLM, and BerriAI GitHub repositories. Mandiant responded to a wave of incident response engagements tied to that activity, underscing the breadth of TeamPCP’s GitHub-based operations.
Key points
- TeamPCP compromised a GitHub account to inject malicious code into 42+ repositories and 236 branches across Azure, Azure-Samples, and Microsoft orgs.
- The attack publishes trojanized packages directly to the GitHub orgs, giving developers a supply-chain initial access vector.
- This is the latest in TeamPCP's 2026 campaign that has also hit Trivy, Checkmarx, LiteLLM, BerriAI, and 160+ npm/PyPI packages via the Mini Shai-Hulud worm.
- The group is tracked as UNC6780 and has been active since late March 2026, with the FBI confirming its role in large-scale software supply chain compromises.