The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave

T1Covered by 1 source · first reported by Wiz Research at 19 May, 08:29 UTC

Multi-ecosystem supply chain compromise by TeamPCP targets GitHub, NPM, and VSCode to steal credentials and establish persistence.

security

Sources

• T1The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest WaveWiz Research19 May, 08:29