A hacker group known as TeamPCP has been carrying out a series of software supply chain attacks, targeting open-source code repositories. The group's latest victim is GitHub, where they have been poisoning code. The scale of the attacks is described as unprecedented.

AI summaries can be wrong sometimes—always verify important details using the source article.