#software supply chain

Engineering Culture

790,000 Downloads a Month: TeamPCP Hijacks CI/CD Pipelines at Scale

Telnyx, a Python package pulled 790,000 times monthly, just got weaponized by TeamPCP attackers. It's proof your CI/CD pipeline isn't backend plumbing—it's the front line.

Frontend & Web

Axios Backdoor Blitz: Why Your Next Build Could Be Lazarus's Playground

Axios — downloaded 83 million times weekly — got backdoored by Lazarus Group. Three hours was enough to infect countless builds. Time to ditch blind trust.