--- title: TeamPCP supply chain attack hits Trivy and LiteLLM,... description: A curated digest covering several major developments: TeamPCP, a threat group, conducted a multi-stage supply chain attack between February and March 2026,... canonical: https://daily.dev/posts/teampcp-supply-chain-attack-hits-trivy-and-litellm-kafka-4-2-adds-native-queue-semantics-aeat28oaj twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: TeamPCP supply chain attack hits Trivy and LiteLLM, Kafka 4.2 adds native queue semantics | daily.dev og:description: A curated digest covering several major developments: TeamPCP, a threat group, conducted a multi-stage supply chain attack between February and March 2026,... og:url: https://daily.dev/posts/teampcp-supply-chain-attack-hits-trivy-and-litellm-kafka-4-2-adds-native-queue-semantics-aeat28oaj og:image: https://api.daily.dev/og/posts/AeaT28Oaj.png og:image:alt: TeamPCP supply chain attack hits Trivy and LiteLLM, Kafka 4.2 adds native queue semantics og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TeamPCP supply chain attack hits Trivy and LiteLLM, Kafka 4.2 adds native queue semantics **[Backend Digest](https://daily.dev/sources/backend_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A curated digest covering several major developments: TeamPCP, a threat group, conducted a multi-stage supply chain attack between February and March 2026, compromising GitHub Actions workflows and PyPI tokens to inject infostealers into Aqua Trivy, Checkmarx KICS, and LiteLLM, ultimately self-replicating into 48 npm packages and exfiltrating credentials from an estimated 500,000 machines. Kafka 4.2 introduces share groups (KIP-932), enabling native queue-style point-to-point messaging with message-level acknowledgements, offering a potential consolidation path away from RabbitMQ or ActiveMQ. Debezium 3.5.0 ships parallel snapshots, Oracle memory improvements, and CockroachDB support. Discord published a writeup on zero-overhead distributed tracing in Elixir's actor model. Additional briefs cover MotherDuck's Postgres wire protocol, Redpanda Cloud GA, an Astro SSRF CVE, Pulumi's OIDC-based secret elimination, Bun vs Node benchmarks, and GKE's lack of a Karpenter equivalent. ## Content **TLDR:** A threat group called TeamPCP spent February and March compromising GitHub Actions workflows and PyPI tokens to inject infostealers into widely-used security tools including Aqua Trivy, Checkmarx KICS, and BerriAI LiteLLM. The attack eventually self-replicated into 48 npm packages in under a minute and is estimated to have exfiltrated credentials from 500,000 machines. Separately, Kafka 4.2 ships queue-style consumption via share groups, which is a meaningful architectural shift for teams running both Kafka and RabbitMQ. Discord also published a detailed writeup on adding distributed tracing to Elixir's actor model with zero performance overhead. --- ## TeamPCP multi-stage supply chain attack on security tooling This one is worth reading carefully if your CI pipeline pulls from PyPI or uses GitHub Actions. Between February and March 2026, TeamPCP compromised GitHub Actions workflows and PyPI publishing tokens to inject infostealer payloads into Aqua Security Trivy, Checkmarx KICS, BerriAI LiteLLM, and the Telnyx Python SDK. The payload evolved through three versions, ending with CanisterWorm — a self-replicating worm with a decentralized ICP-based C2 and a wiper component. Using harvested tokens, the group then infected 48 npm packages in under 60 seconds. Estimated impact is 300 GB of exfiltrated data and credentials from 500,000 machines. The group has since announced a partnership with the Vect ransomware group. Mitigation guidance focuses on SBOM visibility, CI/CD policy hardening, and auditing GitHub PATs and cloud credentials. ## Kafka 4.2 adds native queue semantics via share groups KIP-932 lands in Kafka 4.2 with a new share group concept that lets consumers scale beyond partition count and introduces message-level acknowledgement with ACCEPT, RELEASE, REJECT, and RENEW types. This is point-to-point messaging natively in Kafka, which means teams running Kafka alongside RabbitMQ or ActiveMQ now have a real reason to consolidate. The trade-off is loss of partition-level ordering guarantees, which is fine for throughput-focused workloads but worth thinking through before migrating anything that depends on ordered processing. ## Discord adds distributed tracing to Elixir's actor model at zero cost Discord's engineering team published a detailed account of integrating distributed tracing into Elixir's concurrent, message-passing architecture without incurring any production overhead. Observability in actor-model systems is genuinely hard — message passing breaks the call stack assumptions most tracing tools rely on. The fact that they got to zero-cost tracing in production is the interesting part, and the writeup covers the specific technical challenges they had to solve to get there. ## Debezium 3.5.0 ships parallel snapshots and Oracle memory improvements Debezium 3.5.0.Final resolves 216 issues. The headline additions are parallel multithreaded chunk-based snapshots for faster initial loads, Oracle bookkeeping memory reduction of roughly 50%, and Oracle 26ai compatibility. CockroachDB gets initial snapshot support, multi-table concurrent streaming, and incremental snapshots. SQL Server adds managed identity support via Azure AD. Plans for 3.6 include decoupling from Kafka and pluggable schema management, which would be a significant architectural change for anyone running Debezium in non-Kafka environments. --- ## Also notable - **MotherDuck Postgres wire protocol:** MotherDuck now exposes a Postgres-compatible endpoint, meaning any JDBC, node-postgres, or rust-postgres client connects without installing a DuckDB library — useful for serverless deployments and BI tool compatibility. - **Redpanda Cloud Topics GA:** Redpanda 26.1 separates metadata storage (Raft logs) from data storage (S3/GCS), eliminating cross-AZ replication overhead while preserving transaction and idempotency guarantees. - **Astro SSRF via Host header (CVE-2026-25545):** Astro's SSR fetched custom error pages using the user-controlled Host header, enabling full internal network access via redirect; fixed in astro@5.17.2 by reading error pages from disk instead. - **Pulumi eliminates long-lived CI secrets across 70+ repos:** Replaced GitHub Secrets with short-lived OIDC-chained credentials via Pulumi ESC, leaving nothing persistent to steal in a supply chain compromise scenario. - **Meta's DrP debugging platform:** Meta runs 50,000 automated analyses daily across 300 teams using codified investigation workflows that chain across service boundaries, reducing MTTR by 20-80%. - **Harness AI-powered rollback:** Harness's new verification layer connects to observability tools at deploy time to decide automatically whether a rollout should proceed or roll back; their survey found 78% of teams have fragmented delivery toolchains. - **Cloudflare Programmable Flow Protection (beta):** Magic Transit Enterprise customers can now upload custom eBPF programs to define DDoS mitigation logic for proprietary UDP protocols, with stateful flow tracking and cryptographic challenge support. - **Informatica CDI at scale:** Salesforce/Informatica's Cloud Data Integration runs 250,000 daily pipelines for 5,500 enterprise customers on a Spark-on-Kubernetes platform with a FinOps automation layer that reduces infrastructure costs by roughly 1.65x. - **Bun vs Node 2026 benchmarks:** Bun hits ~120k req/s versus Node's ~45k in HTTP throughput tests, with 4x faster startup and ~95% npm compatibility for typical web apps. - **Kafka multi-region DR guide:** Covers four DR patterns (active-passive, active-active, 3-DC stretched, 2.5-DC with observer replicas) with honest trade-off analysis on offset management during failback. - **GKE still lacks a Karpenter equivalent:** AWS and Azure have both adopted Karpenter (AKS reached GA in early 2026), while GKE remains on Cluster Autoscaler and Node Auto-Provisioning; Cast AI is the main third-party option for continuous node consolidation on GKE. - **Spec-driven development for AI agents:** Multiple posts converge on the same idea — AI agents fail not because they're wrong but because they're underconstrained, and writing durable specs before implementation is the practical fix. ## Similar posts on daily.dev - [Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure](https://daily.dev/posts/weaponizing-the-protectors-teampcp-s-multi-stage-supply-chain-attack-on-security-infrastructure-fxtlie1qu) · Unit 42 · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#cicd](https://daily.dev/tags/cicd), [#kafka](https://daily.dev/tags/kafka), [#debezium](https://daily.dev/tags/debezium) [View this post on daily.dev](https://daily.dev/posts/teampcp-supply-chain-attack-hits-trivy-and-litellm-kafka-4-2-adds-native-queue-semantics-aeat28oaj) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/teampcp-supply-chain-attack-hits-trivy-and-litellm-kafka-4-2-adds-native-queue-semantics-aeat28oaj","headline":"TeamPCP supply chain attack hits Trivy and LiteLLM, Kafka 4.2 adds native queue semantics","text":"A curated digest covering several major developments: TeamPCP, a threat group, conducted a multi-stage supply chain attack between February and March 2026, compromising GitHub Actions workflows and PyPI tokens to inject infostealers into Aqua Trivy, Checkmarx KICS, and LiteLLM, ultimately self-replicating into 48 npm packages and exfiltrating credentials from an estimated 500,000 machines. Kafka 4.2 introduces share groups (KIP-932), enabling native queue-style point-to-point messaging with message-level acknowledgements, offering a potential consolidation path away from RabbitMQ or ActiveMQ. Debezium 3.5.0 ships parallel snapshots, Oracle memory improvements, and CockroachDB support. Discord published a writeup on zero-overhead distributed tracing in Elixir's actor model. Additional briefs cover MotherDuck's Postgres wire protocol, Redpanda Cloud GA, an Astro SSRF CVE, Pulumi's OIDC-based secret elimination, Bun vs Node benchmarks, and GKE's lack of a Karpenter equivalent.","url":"https://daily.dev/posts/teampcp-supply-chain-attack-hits-trivy-and-litellm-kafka-4-2-adds-native-queue-semantics-aeat28oaj","datePublished":"2026-04-01T04:18:54.688Z","dateModified":"2026-04-01T04:19:28.117Z","author":{"@type":"Organization","name":"Backend Digest","logo":"https://media.daily.dev/image/upload/s--9uCSrsAb--/f_auto,q_auto/v1773839398/logos/backend_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/backend_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/backend_digest","name":"Backend Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Backend Digest","item":"https://daily.dev/sources/backend_digest"},{"@type":"ListItem","position":3,"name":"TeamPCP supply chain attack hits Trivy and LiteLLM, Kafka 4.2 adds native queue semantics"}]} ```