Self-propagating malware poisons open source software and wipes Iran-based machines

A hacking group called TeamPCP is running a persistent campaign deploying self-propagating malware that targets open source software ecosystems. After compromising the Trivy vulnerability scanner via Aqua Security's GitHub account, the group spread a worm through npm that infected 28 packages in under 60 seconds by stealing npm Show more