TeamPCP’s Open-Source Poisoning Escalates Into a Global, Ongoing Threat
TL;DR
A cybercrime group known as TeamPCP has intensified software supply-chain attacks by poisoning hundreds of open-source tools, turning legitimate code into a foothold for extortion, with GitHub among the victims—signaling a shift from rare incidents to an ongoing, widespread threat in software security.
- A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale WIRED
- Investigating unauthorized access to GitHub-owned repositories The GitHub Blog
- Compromised coding tool helped hackers breach thousands of GitHub repositories Cybersecurity Dive
- GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension The Hacker News
- GitHub Confirms Breach, 4K Internal Repos Stolen Dark Reading
Want the full story? Read the original reporting
Read on WIRED