Australian Police Arrest Two Alleged Members of TeamPCP Supply Chain Hacking Group
The Australian Federal Police announced the arrest of two men from Western Australia suspected of belonging to TeamPCP, a group accused of poisoning open-source software packages to infiltrate thousands of businesses worldwide. Investigators describe the operation as unusually long-lived, with the group allegedly publishing malicious packages and using them as footholds for data theft and extortion over an extended period.
KrebsOnSecurity had reportedly identified the 21-year-old suspect months before the arrests and maintained contact with someone claiming to speak for the group, gathering details on how operational mistakes may have exposed its leader. Authorities have not officially named the suspects, but the case highlights how open-source ecosystems remain an attractive target for attackers seeking scale.