A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

A hacker group called TeamPCP has conducted widespread software supply chain attacks targeting open source code on GitHub and impacting hundreds of organizations. This represents an unprecedented scale of coordinated attacks on the open source ecosystem. GitHub is identified as one of the latest victims of this campaign.