TeamPCP’s rising campaign: how malicious VSCode plugins breach GitHub repos
A hacker group is weaponizing infected VSCode extensions to infiltrate thousands of GitHub repositories, exposing the fragility of trusted development pipelines. The scale and frequency of these attacks demand urgent shifts in open source security practices.