← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Weaponizing the Protectors: TeamPCPs Multi-Stage Supply Chain Attack on Security Infrastructure
WHITE TeamPCP AlienVault 2026-04-01 Modified: 2026-04-01
63
IOCs
HIGH VOLUME
Between late February and March 2026, threat group TeamPCP conducted a highly calculated, escalating sequence of supply chain threats. It systematically compromised widely trusted open-source security tools, including the vulnerability scanners Trivy and KICS and the popular AI gateway LiteLLM. The affected software also includes the official Python SDK of Telnyx.
teampcpcanisterwormcve-2025-55182supply chain attackwiper
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
CanisterWorm
Indicators of Compromise (63)
All IPv4 CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 hostname
TYPEINDICATORDESCRIPTIONCREATED
IPv4 195.5.171.242 — 2026-04-01
IPv4 45.148.10.212 — 2026-04-01
CVE CVE-2025-55182 — 2026-04-01
FileHash-MD5 46e7a5c4cf645b77f24023eef873f56f — 2026-04-01
FileHash-MD5 55405de62427ac56106f0fdb1c33dedd — 2026-04-01
FileHash-MD5 5870a0bf82bbdf2687d8dce89dfa668f — 2026-04-01
FileHash-MD5 718c13820bff309925b5b629bbb5da2c — 2026-04-01
FileHash-MD5 7646a872455dab186dc9de17f7ef0340 — 2026-04-01
FileHash-MD5 805c08686e755c063a0bb460bdf9dcc4 — 2026-04-01
FileHash-MD5 8bfefb76454efe404359831d4fe7137c — 2026-04-01
FileHash-MD5 8cf49650b7a000d09e8af77c314dfdad — 2026-04-01
FileHash-MD5 d761a6a7ae9f2254bd81ac234033a8b8 — 2026-04-01
FileHash-MD5 df43394b926e609e6ad020b157b151a1 — 2026-04-01
FileHash-SHA1 27cf71eada45ceb298cd793219c217452241e443 — 2026-04-01
FileHash-SHA1 3950fa21431ad211e1292119ff1c77e1797fa595 — 2026-04-01
FileHash-SHA1 4ce6ad55d8912aacc4ae4c572237131d0b7ba4b5 — 2026-04-01
FileHash-SHA1 4e574710f80ada2abe7cf2ffd78f99592bb6c2c2 — 2026-04-01
FileHash-SHA1 4fed54d88f919c675ee2f575f70698a8d3649287 — 2026-04-01
FileHash-SHA1 53495d74e72a0e74a2e1fdfe69f39fd538abd9e6 — 2026-04-01
FileHash-SHA1 6589718e7b026d7278a8eb8333c59b8e297f4016 — 2026-04-01
FileHash-SHA1 7f63db03c90913b90c6972fabd77c9862cba917f — 2026-04-01
FileHash-SHA1 9e2b6deeca9623db3868d4bb36ba2c053c949e65 — 2026-04-01
FileHash-SHA1 d820fc3440e7eadc575315f9a96a34ae450ec457 — 2026-04-01
FileHash-SHA256 0880819ef821cff918960a39c1c1aada55a5593c61c608ea9215da858a86e349 — 2026-04-01
FileHash-SHA256 0c0d206d5e68c0cf64d57ffa8bc5b1dad54f2dda52f24e96e02e237498cb9c3a — 2026-04-01
FileHash-SHA256 0c6a3555c4eb49f240d7e0e3edbfbb3c900f123033b4f6e99ac3724b9b76278f — 2026-04-01
FileHash-SHA256 18a24f83e807479438dcab7a1804c51a00dafc1d526698a66e0640d1e5dd671a — 2026-04-01
FileHash-SHA256 1e559c51f19972e96fcc5a92d710732159cdae72f407864607a513b20729decb — 2026-04-01
FileHash-SHA256 30015dd1e2cf4dbd49fff9ddef2ad4622da2e60e5c0b6228595325532e948f14 — 2026-04-01
FileHash-SHA256 41c4f2f37c0b257d1e20fe167f2098da9d2e0a939b09ed3f63bc4fe010f8365c — 2026-04-01
FileHash-SHA256 5e2ba7c4c53fa6e0cef58011acdd50682cf83fb7b989712d2fcf1b5173bad956 — 2026-04-01
FileHash-SHA256 61ff00a81b19624adaad425b9129ba2f312f4ab76fb5ddc2c628a5037d31a4ba — 2026-04-01
FileHash-SHA256 6328a34b26a63423b555a61f89a6a0525a534e9c88584c815d937910f1ddd538 — 2026-04-01
FileHash-SHA256 7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9 — 2026-04-01
FileHash-SHA256 7b5cc85e82249b0c452c66563edca498ce9d0c70badef04ab2c52acef4d629ca — 2026-04-01
FileHash-SHA256 7df6cef7ab9aae2ea08f2f872f6456b5d51d896ddda907a238cd6668ccdc4bb7 — 2026-04-01
FileHash-SHA256 822dd269ec10459572dfaaefe163dae693c344249a0161953f0d5cdd110bd2a0 — 2026-04-01
FileHash-SHA256 887e1f5b5b50162a60bd03b66269e0ae545d0aef0583c1c5b00972152ad7e073 — 2026-04-01
FileHash-SHA256 bef7e2c5a92c4fa4af17791efc1e46311c0f304796f1172fce192f5efc40f5d7 — 2026-04-01
FileHash-SHA256 c37c0ae9641d2e5329fcdee847a756bf1140fdb7f0b7c78a40fdc39055e7d926 — 2026-04-01
FileHash-SHA256 cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3 — 2026-04-01
FileHash-SHA256 d5edd791021b966fb6af0ace09319ace7b97d6642363ef27b3d5056ca654a94c — 2026-04-01
FileHash-SHA256 d8caf4581c9f0000c7568d78fb7d2e595ab36134e2346297d78615942cbbd727 — 2026-04-01
FileHash-SHA256 e4edd126e139493d2721d50c3a8c49d3a23ad7766d0b90bc45979ba675f35fea — 2026-04-01
FileHash-SHA256 e6310d8a003d7ac101a6b1cd39ff6c6a88ee454b767c1bdce143e04bc1113243 — 2026-04-01
FileHash-SHA256 e64e152afe2c722d750f10259626f357cdea40420c5eedae37969fbf13abbecf — 2026-04-01
FileHash-SHA256 e87a55d3ba1c47e84207678b88cacb631a32d0cb3798610e7ef2d15307303c49 — 2026-04-01
FileHash-SHA256 e9b1e069efc778c1e77fb3f5fcc3bd3580bbc810604cbf4347897ddb4b8c163b — 2026-04-01
FileHash-SHA256 ecce7ae5ffc9f57bb70efd3ea136a2923f701334a8cd47d4fbf01a97fd22859c — 2026-04-01
FileHash-SHA256 f398f06eefcd3558c38820a397e3193856e4e6e7c67f81ecc8e533275284b152 — 2026-04-01
FileHash-SHA256 f7084b0229dce605ccc5506b14acd4d954a496da4b6134a294844ca8d601970d — 2026-04-01
IPv4 209.34.235.18 — 2026-04-01
IPv4 212.71.124.188 — 2026-04-01
IPv4 23.142.184.129 — 2026-04-01
IPv4 63.251.162.11 — 2026-04-01
IPv4 83.142.209.11 — 2026-04-01
IPv4 83.142.209.203 — 2026-04-01
hostname championships-peoples-point-cassette.trycloudflare.com — 2026-04-01
hostname create-sensitivity-grad-sequence.trycloudflare.com — 2026-04-01
hostname investigation-launches-hearings-copying.trycloudflare.com — 2026-04-01
hostname plug-tab-protective-relay.trycloudflare.com — 2026-04-01
hostname souls-entire-defined-routes.trycloudflare.com — 2026-04-01
hostname tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io — 2026-04-01
References (1)
↗ https://unit42.paloaltonetworks.com/teampcp-supply-chain-attacks/