Vendor Threat Intelligence

TeamPCP hid its infostealer inside the scanners that audit everyone else's code

Unit 42 says the group backdoored Trivy, KICS, LiteLLM and Telnyx's Python SDK, tools that run inside CI with the privileges needed to reach production secrets, which is also why the headline counts deserve a slow read.