--- title: TeamPCP Partners With Ransomware Group Vect to Target... description: TeamPCP, the threat actor behind recent supply chain attacks on Trivy, LiteLLM, and other open source tools, has announced a partnership with ransomware group... canonical: https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: TeamPCP Partners With Ransomware Group Vect to Target Open S... | daily.dev og:description: TeamPCP, the threat actor behind recent supply chain attacks on Trivy, LiteLLM, and other open source tools, has announced a partnership with ransomware group... og:url: https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk og:image: https://api.daily.dev/og/posts/RgBM7VgFk.png og:image:alt: TeamPCP Partners With Ransomware Group Vect to Target Open S... og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TeamPCP Partners With Ransomware Group Vect to Target Open S... **[Socket](https://daily.dev/sources/socketdev)** · 6 min read · 0 upvotes · 0 comments ## Summary TeamPCP, the threat actor behind recent supply chain attacks on Trivy, LiteLLM, and other open source tools, has announced a partnership with ransomware group Vect to escalate compromises into large-scale ransomware operations. The group is leveraging BreachForums to distribute affiliate keys to over 300,000 members, dramatically expanding their attack capacity. Having already exfiltrated roughly 300 GB of credentials from CI/CD pipelines, TeamPCP is now operationalizing that access for follow-on ransomware campaigns. Security researchers note a massive shift toward targeting open source ecosystems, with AI lowering the barrier to building and deploying malware at scale. CI/CD tools, security scanners, and IDE extensions are highlighted as high-risk entry points due to their broad access within enterprise environments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [TeamPCP Is Systematically Targeting Security Tools Across th...](https://daily.dev/posts/teampcp-is-systematically-targeting-security-tools-across-th--xiexzca7d) · Socket · 0 upvotes · 0 comments - [Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure](https://daily.dev/posts/weaponizing-the-protectors-teampcp-s-multi-stage-supply-chain-attack-on-security-infrastructure-fxtlie1qu) · Unit 42 · 0 upvotes · 0 comments - [Ongoing supply-chain attack targets security, dev tools](https://daily.dev/posts/ongoing-supply-chain-attack-targets-security-dev-tools-ovho9e01d) · The Register · 1 upvotes · 0 comments - [The TeamPCP attacks are a warning: Your CI/CD pipeline is the new front line](https://daily.dev/posts/the-teampcp-attacks-are-a-warning-your-ci-cd-pipeline-is-the-new-front-line-jzp9qckpb) · The New Stack · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#cicd](https://daily.dev/tags/cicd), [#malware](https://daily.dev/tags/malware), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"TeamPCP Partners With Ransomware Group Vect to Target Open S...","url":"https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk"},"datePublished":"2026-03-26T19:17:49.766Z","dateModified":"2026-03-26T19:18:14.682Z","description":"TeamPCP, the threat actor behind recent supply chain attacks on Trivy, LiteLLM, and other open source tools, has announced a partnership with ransomware group...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/202a7bddc4353ec2cc7371865c3e3d7e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/202a7bddc4353ec2cc7371865c3e3d7e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Socket","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Socket","logo":"https://media.daily.dev/image/upload/s---oEn9czC--/f_auto/v1716187892/logos/socketdev","url":"https://daily.dev/sources/socketdev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teampcp-partners-with-ransomware-group-vect-to-target-open-s--rgbm7vgfk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,cicd,malware,ransomware","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Socket","item":"https://daily.dev/sources/socketdev"},{"@type":"ListItem","position":3,"name":"TeamPCP Partners With Ransomware Group Vect to Target Open S..."}]} ```