Dossier
developers' environments
Coverage of developers' environments in the Nexus archive.
- Another npm supply chain worm is tearing through dev environments
Another npm supply chain attack is spreading through compromised packages, stealing secrets and sensitive data from developers' environments. The attack shares similarities with previous infections linked to the TeamPCP group and references a 'TeamPCP/LiteLLM method' in its payload.