TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)

SANS ISC continued tracking the TeamPCP supply‑chain campaign (update through 2026‑06‑07). Key developments: the US government has formally acknowledged the campaign, and TeamPCP’s Mini Shai‑Hulud framework — open‑sourced last month — is now being adopted by a broader set of attackers. The combination of a supply‑chain compromise of security tooling and an openly available attacker framework increases risk of widespread reuse, faster weaponization by lower‑skill actors, and further supply‑chain incidents.