Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Two men charged in Australia for alleged roles in TeamPCP supply chain attacks.
Run Australian Federal Police?
Get an email when a reviewed story names Australian Federal Police, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Two men in Western Australia have been charged with multiple offenses for their alleged involvement in the TeamPCP cybercrime group. This group is accused of compromising open-source security tools like Trivy and Checkmarx KICS, as well as the AI gateway LiteLLM, through supply chain attacks. The FBI warns that compromised data and credentials pose a persistent risk.
The lesson from this incident
Full lessonThe TeamPCP group allegedly infiltrated widely-used open-source security tools — Trivy, Checkmarx KICS, and LiteLLM — demonstrating that even security-focused software is a high-value supply chain target. By compromising tools that organizations trust to protect them, attackers gain privileged access to downstream environments at scale. The theft of credentials and data compounds the damage, as exposed secrets can persist and be exploited long after the initial breach is discovered. This case underscores that open-source dependencies carry inherent trust risks that must be actively managed rather than assumed safe.
What helps against this
How we list vendors- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
- malware — TeamPCP