#CI/CD security

Engineering Culture

790,000 Downloads a Month: TeamPCP Hijacks CI/CD Pipelines at Scale

Telnyx, a Python package pulled 790,000 times monthly, just got weaponized by TeamPCP attackers. It's proof your CI/CD pipeline isn't backend plumbing—it's the front line.

AI Dev Tools

GitHub Actions 2026: Lockfiles and Policies to Bulletproof CI/CD

CI/CD's wild west ends in 2026. GitHub's dropping lockfiles and centralized policies to make Actions secure by default — no more supply chain roulette.