Teampcp

2 posts

/bitwarden-cli-supply-chain-attack/featured-image.png

Bitwarden CLI Backdoored on npm for 93 Minutes

April 24, 2026

Bitwarden’s CLI was backdoored and pushed to npm on April 22, 2026. It was live for 93 minutes. Every developer who installed it during that window has to …

/pypi-supply-chain-attack-xinference-teampcp/featured-image.png

How TeamPCP Poisoned Six Python Packages and Breached Over 1000 Organizations in Five Weeks

April 23, 2026

A group of attackers has been quietly poisoning Python packages for five weeks straight. They have exfiltrated data from over 500,000 infected machines, hit …