CanisterWormMalware
CanisterWorm is a self-propagating malware that has been used by TeamPCP in credential harvesting and software supply chain campaigns since at least 2026. CanisterWorm has used npm credentials to infect software packages and propagate across developer ecosystems.From MITRE ATT&CK
Last reported 27 days ago, by CERT-EU3 reports
ATT&CK techniques
6 of 29 · each with the sentence it comes from- T1195Supply Chain Compromise
“Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise”
- T1195.002Compromise Software Supply Chain
“T1195.002”
- T1543.002Systemd Service
“T1543.002”
- T1552.004Private Keys
“The regex pattern set is extensive: AWS keys, GCP service account JSON, database connection strings, Stripe keys, private keys, Docker auth, and more.”
- T1552.005Cloud Instance Metadata API
“T1552.005”
- T1003OS Credential Dumping
“T1003”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
3 reports, newest first · the exact sentence from each-
Cyber Brief 26-04 - March 2026“The same actor was linked to a follow-up campaign deploying a self-propagating npm worm named CanisterWorm.”
-
Shai-Hulud Goes Open Source“The three absent capabilities WAV steganography, cryptomining payloads, and the CanisterWorm ICP-based C2 may represent operational additions not included in the open-sourced version, or parallel tooling maintained separately.”
-
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise“npm (March 20): Less than 24 hours after the Trivy compromise, TeamPCP deployed a self-propagating worm — dubbed CanisterWorm by Aikido researchers — across the npm ecosystem.”
Indicators in its reports
named in the reports above- models.litellm[.]cloudin 1 report
- checkmarx[.]zonein 1 report
- scan.aquasecurtiy[.]orgin 1 report
- 45.148.10[.]212in 1 report
- 83.142.209[.]11in 1 report
- mirror.gcr[.]ioin 1 report
- 46.151.182[.]203in 1 report
- litellm[.]cloudin 1 report
- m[.]groupin 1 report
- 3f3f42d072bd3686…ec0ea572eea7in 1 report
- 29ac906c8bd801df…278c24e4f1a7in 1 report
- 619c56acf572df75…2da3a44f10b4in 1 report
- 83.142.209[.]194in 1 report
- git-tanstack[.]comin 1 report
- hxxps://api.github[.]com/userin 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.