Google says undercover analyst tracked TeamPCP supply-chain campaign

Google's threat intelligence group said it had an undercover Mandiant analyst inside TeamPCP during the group's supply-chain hacking campaign. Google said the access helped it monitor the group, warn breach targets and disrupt exploitation attempts. The group allegedly tainted hundreds of open-source programs, stole developer accounts and breached more than a thousand companies before two alleged members were arrested in Australia last month.