Open Source Is Under Attack. Here’s How to Manage the Risk Without Abandoning the Benefit
In March 2026, a threat actor known as TeamPCP executed one of the most consequential open source supply chain attacks on record. Starting with a
Important Notice: Due to the AWS outage, you may experience some technical issues while using our services today
Introducing ActiveState Curated Catalogs. Total Control for Security. Zero Friction for Developers. Vetted components from 79M+ built-from-source packages → Learn More
In March 2026, a threat actor known as TeamPCP executed one of the most consequential open source supply chain attacks on record. Starting with a

Learn how to detect and remediate zero-day vulnerabilities across the software lifecycle and reduce exposure before disclosure.

The modern software development lifecycle is no longer operating at human scale. AI code assistants have fundamentally shifted the open source security challenge from a
Chat with a member of our team or explore our catalog of secure open source.
Chat with a member of our product team today.
To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen.