From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI

The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.

The post From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI appeared first on SecurityWeek.

Read more: From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI

Story added 25. March 2026, content source with full text you can find at link above.