GoKawiilAustralian Federal Police Arrest Two Men Tied to TeamPCP Supply-Chain Hacking Ring
The Australian Federal Police arrested two men, aged 21 and 23, from Western Australia over their alleged roles in TeamPCP, a group accused of running the longest-running spree of software supply chain attacks. TeamPCP is said to have poisoned hundreds of open-source packages using a self-propagating worm called Shai-Hulud, stealing developer credentials to spread malicious code further. KrebsOnSecurity reports it had identified the 21-year-old suspect months earlier and had been in contact with a person claiming to speak for the group.
GoKawiil's interpretation of the reporting above, not reported fact.
Open-source software underpins vast swaths of corporate infrastructure, so a group capable of repeatedly compromising developer credentials and propagating malware through trusted repositories poses an outsized risk to the global software supply chain. These arrests suggest law enforcement can eventually unravel even sophisticated, self-replicating extortion schemes, but the underlying weaknesses in open-source credential security remain unresolved.
- Two Western Australian men, 21 and 23, were arrested over alleged TeamPCP membership.
- TeamPCP allegedly used the Shai-Hulud worm to embed malicious code across open-source tools.
- The group's tactics involved stealing developer credentials to repeatedly re-infect new software packages.
Source: krebsonsecurity.com, 2026-08-27
Published there as: “Two Alleged ‘TeamPCP’ Hackers Arrested in Australia”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.