PyPI

TeamPCP Compromises 170+ npm Packages in Coordinated AI Infrastructure Attack

Supply chain assault targets Mistral AI, TanStack, UiPath, and OpenSearch in first npm worm producing valid security provenance