Australian authorities charge two men accused of belonging to TeamPCP, a cybercrime group blamed for major software supply-chain attacks. The Australian Federal Police (AFP) says the men face multiple offences connected to creating and distributing malicious code through open-source software, which then gets used to compromise organizations globally.
The AFP and international partners identify the alleged suspects as two men from Western Australia, aged 21 and 23, who are arrested and later appear in Perth Magistrates Court in late August. Reports state the operations involved targeting open-source security tools, including the compromise of Trivy and Checkmarx KICS in March 2026, along with attacks tied to the AI gateway LiteLLM. Some outlets describe the alleged scheme as a long-running supply-chain campaign affecting “thousands” of organizations. Other coverage focuses more on the collaborative investigative effort between Australian authorities and the FBI, and on the number of charges each suspect faces.
While the outlets largely align on the arrests, alleged role, and targeted software, they differ on details such as the level of background reporting and whether they publish additional names or investigative context beyond AFP statements. All accounts attribute the charges to AFP-led actions supported by other law-enforcement agencies.
