A hacker group is poisoning open source code at an unprecedented scale

Cybercriminal group TeamPCP is executing an unprecedented wave of software supply chain attacks, compromising hundreds of open source tools and breaching organizations through poisoned code. The incident marks the latest escalation in what researchers describe as the longest-running spree of software supply chain attacks ever recorded. TeamPCP has deployed a self-replicating worm called Mini Shai-Hulud that largely automates supply chain attacks by stealing CI/CD credentials and using them to publish infected versions of further packages.

Source: Ars Technica | 2026-05-22