A coordinated campaign is systematically poisoning open-source projects at an alarming scale, targeting developers through malicious code injections. This unprecedented supply chain attack, attributed to the group TeamPCP, poses a significant threat to software integrity and developer trust across the ecosystem.
Opening Kapyn…