TeamPCP deploys CanisterWorm on NPM following Trivy compromise

TeamPCP unleashed CanisterWorm, a self-propagating malware on NPM that abuses ICP canisters for resilient command-and-control, harvests developer tokens to infect new packages, and marks a dangerous escalation from targeted supply chain compromise to automated ecosystem-wide worming.