TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)

SANS ISC updates (Mar 24–28, 2026) track the TeamPCP supply‑chain campaign as it shifts into a monetization phase: PyPI compromises (LiteLLM earlier and a reported Telnyx package compromise), a Vect ransomware partnership and first named victim claims. Checkmarx scope appears broader than initially reported, CISA added related entries to the KEV, and detection tools and guidance have been published; the campaign reported no new compromises in the past 48 hours. Related SANS posts highlight an unrelated SmartApeSG malware campaign (Remcos, NetSupport, StealC, Sectop/ArechClient2), Apple’s March