> From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI
[AUTHOR: Ionut Arghire]
[DATE: 25/03/2026 11:55]
[LANGUAGE: EN]
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
The post From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI appeared first on SecurityWeek.