TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st)

SANS ISC reports continued developments in the TeamPCP supply-chain campaign (update through 2026-04-01): operators abused a security scanner supply chain to distribute malicious code, confirmed at least one victim disclosure, and documented post-compromise cloud enumeration and data exfiltration. Recent activity includes a Telnyx PyPI compromise, partnership with/leveraging of Vect ransomware (dual ransomware operations), public data releases (AstraZeneca reported), a Databricks investigation, and narrowing attribution reported by Axios. This remains an active, high-impact supply-chain and r×