TeamPCP Supply Chain Campaign: Activity Through 2026-05-17, (Mon, May 18th)
Source: Isc.Sans.Edu
Published:
<p>Since the last update , the TeamPCP supply chain campaign produced its loudest stretch since the March Trivy disclosure: an officially confirmed Checkmarx Jenkins plugin compromise and a new self-spreading Mini Shai-Hulud worm across npm and PyPI.</p> <p>Two TeamPCP events broke within 48 hours o