Tactics, Techniques & Procedures (TTPs): Specializes in supply chain 'wormification' and automated dependency poisoning. Utilizes 'CanisterSprawl' infrastructure to infect PyPI and npm ecosystems.

UNC6780 has demonstrated a high degree of operational patience, often engaging in 'operational pauses' before launching synchronized multi-vector assaults. Their recent focus on AI-assisted code commits suggests a strategic pivot toward subverting the automated tools that modern developers rely on.