Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware
Supply-chain worms in npm packages, including Nx, steal developer credentials and can enlist local AI coding tools.
76
Organization
Australian Federal Police
- Mentions · 7d0
- Mentions · 30d0
- All mentions10
- First seenAug 27, 2026
- Last mentionedOct 2, 2026
Timeline
10 articles · newest firstAn undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google's Mandiant planted an undercover analyst inside TeamPCP, the supply-chain gang that breached 1,000+ companies via poisoned open-source packages before two Australian arrests.
88
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.
82
Risky Bulletin: Two TeamPCP members arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.
74
Two alleged TeamPCP members arrested and charged after months of software supply
Australian Federal Police, with FBI support, arrested two alleged TeamPCP members behind supply-chain attacks that compromised over 1,000 organizations.
72
Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others
Australian police arrested two suspects over TeamPCP cyberattacks targeting Mercor, OpenAI, and other tech companies.
58
Two Arrests, One Supply-Chain Attack, and a Lot of Stolen Credentials
AFP charges two men over TeamPCP open-source supply-chain attacks that stole 500,000+ credentials from 1,000+ organizations via four malware families.
68
Australia charges two men for TeamPCP supply
Australia charged two Perth men over TeamPCP supply-chain attacks compromising 1,000+ organizations and exposing 500,000+ credentials.
66
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian Federal Police charges two men with 14 offences over TeamPCP supply chain backdoors in Trivy, Checkmarx KICS, and LiteLLM affecting 1,000+ organizations.
72
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members, a data extortion group tied to prolonged software supply chain attacks.
65
Appears with
- TeamPCPthreat actor · 10
- FBIorganization · 8
- Trivyproduct · 5
- mini Shai-Huludmalware · 5
- LiteLLMproduct · 5
- European Commissionvictim · 4
- Western Australia Police Forceorganization · 3
- OpenAIvendor · 3
- TanStackproduct · 3
- LiteLLMvendor · 3
- Mercorvictim · 3
- Trivyvendor · 3
- OpenAIvictim · 3
- ShinyHuntersthreat actor · 2
- Checkmarxvendor · 2
- TanStackvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.