May 2 · 9 min read · On March 26, 2026, security researchers at Socket.dev flagged anomalous publishing activity across dozens of npm packages. Within hours, the scope of the incident became clear: a threat actor operating under the handle TeamPCP had compromised a singl...
Join discussionApr 23 · 23 min read · A month of late nights, broken pipelines, unfixable CVEs, and one cluster that refused to scale — here's the full story of building AutoScaleOps: a complete CI/CD platform with security gates, GitOps,
Join discussion
Apr 11 · 15 min read · Executive Summary On March 24, 2026, threat group TeamPCP successfully pushed two backdoored versions of the Python library LiteLLM (v1.82.7 and v1.82.8) to PyPI — a package registry serving over 95 m
Join discussion
Apr 9 · 16 min read · Before I Was a DevOps Engineer, I Was a Lot of Other Things I have cleaned animal enclosures at a zoo. I have replaced brake pads and diagnosed engine faults as an automotive apprentice. I have manage
Join discussion
Apr 3 · 40 min read · TL;DR — Read This First On March 19, 2026 at approximately 17:43 UTC, threat actor group TeamPCP silently redirected trivy-action@0.34.2 — a real, trusted release already running in thousands of CI/CD
CCorrelic commented
Mar 3 · 5 min read · Dependency Management and Security Scanning The average JavaScript project has 200+ transitive dependencies. The average Python project has 50+. Every one of them is attack surface. Supply chain attacks — compromising a widely-used package to inject ...
Join discussionFeb 12 · 9 min read · Why Traditional Container Scanning Approaches Fall Short Legacy container scanning solutions were designed for slower release cycles and centralized infrastructure models. These tools typically operate as standalone services requiring dedicated infra...
Join discussionFeb 12 · 2 min read · Trivy Container Scanner: Vulnerability Scanning The Problem That Changed Everything Modern development requires modern solutions. Table of Contents Why This Matters Quick Start Implementation Best Practices FAQ Conclusion Why This Matters Essential...
Join discussion
