science1 distinct publisher
TeamPCP hid its infostealer inside the scanners that audit everyone else's code
Unit 42 says the group backdoored Trivy, KICS, LiteLLM and Telnyx's Python SDK, tools that run inside CI with the privileges needed to reach production secrets, which is also why the headline counts deserve a slow read.
Publishers:unit42.paloaltonetworks.com
Reality
- Evidence55
- Adoption58
- Hype gap+32
- Incentives78