A hacker group is poisoning open source code at an unprecedented scale

TeamPCP, a cybercriminal group, has carried out over 20 waves of software supply chain attacks in recent months, hiding malware in more than 500 open source packages. Their latest target is GitHub, where a developer installed a malicious VSCode extension, giving attackers access to approximately 3,800 internal code repositories. GitHub confirmed the breach but stated only its own code was affected, not customer data. TeamPCP is now advertising the stolen source code for sale on BreachForums. Cybersecurity firm Socket has been tracking the group's unprecedented attack spree.