#software supply chain

There's a hacker group poisoning open source code and honestly it's kind of impressive (in a terrifying way)

A hacking group called TeamPCP has been poisoning open source software packages at an unprecedented scale, hitting hundreds of organizations - with GitHub as their latest target.