TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)

Multiple ISC SANS diary entries detail an ongoing TeamPCP supply-chain campaign that has escalated: CERT-EU confirmed a European Commission cloud breach, Sportradar-related details emerged, and Mandiant estimates the campaign has impacted 1,000+ SaaS environments. Prior and related disclosures include the first confirmed victim (Mercor AI), Databricks and AstraZeneca incidents, dual ransomware activity, post-compromise cloud enumeration (Wiz), and resumed LiteLLM releases after Mandiant's audit. Separate advisories note exploitation attempts against exposed Vite installations (CVE-2025-30208);