Skip to content
Open Source Beat
Open Source Projects Developer Tools Programming Languages DevOps & Infrastructure
AI & Machine Learning Security & Privacy Community & Governance Cloud & Databases

#TeamPCP malware

Network diagram showing malware propagation through npm package registry with blockchain nodes for command and control
Security & Privacy

How TeamPCP's Self-Propagating Worm Turned Open Source Into a Backdoor Factory

TeamPCP just demonstrated something terrifying: a worm that doesn't need human help to spread through open source ecosystems. It compromised npm tokens, poisoned packages, and used blockchain to stay untouchable.

4 min read 4 days, 7 hours ago
Open Source Beat

Community-driven. Code-first.

Categories

  • Open Source Projects
  • Developer Tools
  • Programming Languages
  • DevOps & Infrastructure
  • AI & Machine Learning
  • Security & Privacy
  • Community & Governance
  • Cloud & Databases

More

  • RSS Feed
  • Sitemap
  • About
  • Advertise

Legal

  • Privacy
  • Terms
  • Work With Us

Our Network

The AI Catchup AI & Machine Learning Threat Digest Cybersecurity Legal AI Beat Legal Tech Fintech Rundown Finance & Banking DevTools Feed Developer Tools Fintech Dose Crypto & DeFi

© 2026 Open Source Beat. All rights reserved.

📬

Stay in the loop

The week's most important stories from Open Source Beat, delivered once a week.

No spam. Unsubscribe any time.

You clearly love Open Source news — get it in your inbox

🏠 Home 🔍 Search 🔖 Saved 📂 Categories