Cybercrime

Longest-Running Supply Chain Poisoning Campaign Hits GitHub, 3,800 Repos Stolen

TeamPCP's self-replicating worm compromised seven waves of open-source infrastructure in nine weeks, evading every CVE scanner and provenance system in production.