AN UNDERCOVER GOOGLE ANALYST INFILTRATED A NOTORIOUS SUPPLY-CHAIN HACKING GANG

Summary from the TLDR newsletter

The hacker group known as TeamPCP tainted hundreds of open-source programs with its malware, stole developer accounts to perpetuate that software supply-chain hacking, and released a Dune-themed worm to automate the process. They ultimately breached more than a thousand companies. During a key moment of the group's rampage, an undercover researcher from Google infiltrated the group. This allowed Google to monitor the hacking spree from the inside, warn targets, and help disrupt TeamPCP's attempts to exploit victims.