The TeamPCP Attack: How One Stolen Token Compromised Trivy, LiteLLM, and 47 npm Packages — What Every Developer Must Do Now

The TeamPCP supply chain attack compromised Trivy, LiteLLM, and 47 npm packages via a stolen token. Full timeline, detection commands, and CI/CD hardening steps.