Skip to content
Threat Feed

Product

Microsoft Quick Assist

1 brief RSS
high threat

Supply Chain Compromises via Npm, PyPI Packages and Teams Phishing Campaigns

The April 2026 Red Canary Intelligence Insights highlights the axios npm compromise, TeamPCP's LiteLLM compromise via PyPI, and a surge in Microsoft Teams phishing, leading to RAT deployment, credential harvesting, ransomware deployment, or data theft.

axios +4 TeamPCP supply-chain phishing rat npm pypi email-bombing
3r 3t