Threats · 46 days ago
Australian authorities arrested two alleged TeamPCP principals on August 27 and seized devices for forensic analysis, moving the probe past disruption and attribution into a prosecution track. The AFP says the men, aged 21 and 23, were principal participants in the syndicate tied to supply-chain attacks that may have affected more than 1,000 organizations worldwide.
The shift matters because seized phones, laptops, and payment records can show who paid whom, which packages were altered, and whether other compromises were hidden behind the public Trivy and npm cases already linked to the group. That kind of evidence can also surface new indicators and victims that were not visible from the malware itself.
For defenders watching TeamPCP, the exposure is no longer only what the group pushed into open-source software; it is also what investigators may now recover from the people and infrastructure behind it. If your telemetry already covered the known incidents, the next findings may come from sealed evidence, not fresh internet noise.
12 sources covering this story
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Police have charged two men from Western Australia over their alleged involvement in TeamPCP, a cybercriminal gang that has been blamed for a massive software supply-chain hacking campaign.
Australian cops cuff alleged TeamPCP masterminds
Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI
Risky Bulletin: Two TeamPCP members arrested in Australia
Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most c [Read More
Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos
Australian authorities have arrested two alleged members of cybercrime group TeamPCP over widespread supply-chain attacks that compromised more than 1,000 organizations worldwide.
Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others | TechCrunch
The arrests come after a wave of cyberattacks earlier this year targeting tech companies that rely on high-profile and widely used open source software.
Two alleged TeamPCP hackers arrested over global supply chain attacks - Help Net Security
Two alleged TeamPCP hackers were arrested in Australia over cyberattacks that compromised more than 1,000 organizations worldwide.
The Record from Recorded Future
Australia charges two men for TeamPCP supply-chain hacking spree
Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year.
Australia Arrests 2 Alleged TeamPCP Hackers
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian police charged two men over their alleged TeamPCP role in supply chain compromises affecting Trivy, KICS, and LiteLLM.
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.
Australia arrests alleged TeamPCP hackers behind supply-chain attacks
Australian authorities have arrested and charged two young men accused of being part of the TeamPCP hacking group linked to a string of far-reaching developer supply chain attacks.
Part of the PlainSec briefing for 2026-08-31