When Trusted Packages Turn Hostile: Cascading Supply Chain Attacks
TeamPCP hid a credential stealer in a WAV file inside telnyx 4.87.1 on PyPI, using tokens stolen from litellm three days earlier. Why the cascade evades review.
#teampcp
1 article with this tag.