Tactics, Techniques & Procedures (TTPs): Specializes in supply chain subversion, targeting CI/CD pipelines, and wormable malware distribution. Known for compromising official plugins (Jenkins, Checkmarx) to achieve massive scale.

TeamPCP has evolved from a traditional financially motivated group into a high-tier supply chain threat actor. Their ability to identify and exploit vulnerabilities in the 'trust fabric' of the SDLC—such as plugin repositories and package managers—places them in a category previously reserved for state-sponsored APTs. Their recent release of the Shai-Hulud worm indicates a shift toward 'scorched earth' tactics, where the goal is not just theft, but the total subversion of the target's development environment.