COMPAMIR
High-Purity Fact Pipeline
© 2026 COMPAMIR | Verified Intelligence
High-Purity Fact Pipeline
TeamPCP, GitHub
Global
May 22, 2026
Verified: May 22, 2026
"GitHub was breached via a poisoned VSCode extension, affecting approximately 3,800 repositories. The attack was attributed to the cybercriminal group TeamPCP. TeamPCP has been conducting a series of supply chain attacks targeting various tech companies."
Author: Mark Dowd, John McDonald, and Justin Schuh
This book provides a deep technical foundation for understanding how software supply chains are compromised, covering the methodologies attackers use to inject malicious code into development environments and extensions.
As an Amazon Associate, COMPAMIR earns from qualifying purchases.