TeamPCP Hackers Steal 3,800 GitHub Repositories by Poisoning Trivy, LiteLLM, and VS Code Extensions

TeamPCP’s escalating software supply chain campaign culminated in the theft of approximately 3,800 GitHub internal repositories after a poisoned VS Code extension compromised an employee’s device. GitHub described the attackers’ repository count as “directionally consistent” with its investigation, while reporting no evidence that customer-owned repositories were affected. The incident connected two attack surfaces: automated build […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform