TeamPCP is conducting an active supply chain attack campaign in which malicious code is embedded into or delivered through software components that enterprise organizations trust and consume. ShinyHunters and Lapsus$ have each publicly claimed involvement in overlapping breaches, creating an attribution dispute that prevents defenders from applying a single indicator set across affected environments. The business risk is two-fold: organizations may be scoping breach investigations against the wrong actor’s known tooling, and the expanding victim footprint suggests ongoing compromise of additional targets. Note: Source coverage for this campaign is limited to a single secondary-tier publication. All technical claims require independent verification before operational deployment.