From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI
Wed Mar 25 2026
Cybercrime
Malware
Open Source
Software
www.securityweek.com
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$. The post From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI appeared first on SecurityWeek.