Software supply chain hacks trigger wave of intrusions, data theft

The report describes a series of widespread supply-chain attacks attributed to TeamPCP and a North Korean actor (UNC1069) that compromised popular packages (Axios npm, Trivy, KICS, LiteLLM, Telnyx), resulting in stolen secrets and credentials that were rapidly used to perform cloud environment intrusions, exfiltrate data, and deploy a remote access trojan across Windows, macOS, and Linux; the compromises have global impact across many industries and are linked to follow-on ransomware, extortion, and cryptocurrency theft activity.