TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx, and the LiteLLM AI library — and all signs point ...
CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...
Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.
The open-source supply chain hack represents “meaningful industry-wide risk”, according to an industry expert.
Open VSX bug misread scanner failures as clean results, letting malicious VS Code extensions go live before patch in v0.32.0.