Australian authorities have arrested and charged two men accused of being linked to TeamPCP, a hacking collective tied to major supply-chain attacks against open-source software and developer platforms. The campaign allegedly affected organizations worldwide, including Trivy, LiteLLM, Telnyx, SAP, TanStack, the European Commission, Mistral AI, OpenAI, and GitHub, with huge financial and data-theft impact. #TeamPCP #Trivy #LiteLLM #Telnyx #SAP #TanStack #EuropeanCommission #MistralAI #OpenAI #GitHub
Keypoints
- Two young men were arrested in Australia over alleged TeamPCP activity.
- TeamPCP targeted open-source software and developer platforms in supply-chain attacks.
- The attacks affected major organizations and packages, including Trivy, LiteLLM, SAP, and GitHub.
- Police say the malicious code may have compromised more than 1,000 organizations worldwide.
- Investigators seized devices, and the suspects face multiple charges tied to computer offenses and criminal proceeds.