TeamPCP Is Ruining Open Source Code At An Alarming Rate - PC Perspective

Security researchers say TeamPCP is behind repeated open-source supply-chain attacks across GitHub projects.

Attackers used poisoned repositories and malware hidden in more than 500 software packages.

Stolen credentials helped the malware spread further, including through an automated worm.

The campaigns put widely used software updates and code distribution trust at risk.