A hacker group is poisoning open source code at an unprecedented scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.