500 Poisoned Packages, Hundreds of Companies: TeamPCP's Worm Just Reached GitHub
- Posted on May 23, 2026
- By International Business Times
- 0 Views
- 1 min read
500 Poisoned Packages, Hundreds of Companies: TeamPCP's Worm Just Reached GitHub
A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everything from platform infrastructure to proprietary tooling built by the company that hosts more than
