
The Platform Beneath Your Vendors
One poisoned VS Code extension, one GitHub employee laptop, and 3,800 internal repositories listed for sale. This report reconstructs the TeamPCP breach chain and shows why nth-party exposure now lives below the vendor surface.
