software-supply-chain

Wired

GitHub Reports Breach of 3,800 Repositories by TeamPCP

GitHub announced a breach in which a poisoned VSCode extension allowed TeamPCP to access internal code repositories. The incident is the latest in a series of supply chain attacks attributed to the group.

1 source