A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
https://arstechnica.com/information-technology/2026/05/a-hacker-group-is-poisoning-open-source-code-at-an-unprecedented-scale/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
@arstechnica fuckkkk they're going for GitHub. Forget who owns what. Because so much open source SW is hosted and maintained on GitHub, this is a major problem for pretty much everyone everywhere. As much as Gitea and other hit platforms are important, we do need an org, or multiple orgs to maintain security and right now GH is doing the job. This incident just shows how much is at stake - not that we should point fingers and laugh
@arstechnica They're hacking pretty much all the right companies, hats off.
@arstechnica These kinds of events make me think many things around us don't happen not because they can't happen, but there hasn't been anybody to commit to doing so, yet.
Install bonfire.cafe
Get the full app experience
