supply-chain 2 From Trivy to GitHub: how the TeamPCP supply-chain attacks spread, and what we can do about it Aug 29, 2026 The AFP didn't name the software: what was behind the TeamPCP supply-chain attacks Aug 29, 2026