Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware
Supply-chain worms in npm packages, including Nx, steal developer credentials and can enlist local AI coding tools.
76
Organization
Western Australia Police Force
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 27, 2026
- Last mentionedOct 2, 2026
Timeline
4 articles · newest firstTwo alleged TeamPCP members arrested and charged after months of software supply
Australian Federal Police, with FBI support, arrested two alleged TeamPCP members behind supply-chain attacks that compromised over 1,000 organizations.
72
Two Arrests, One Supply-Chain Attack, and a Lot of Stolen Credentials
AFP charges two men over TeamPCP open-source supply-chain attacks that stole 500,000+ credentials from 1,000+ organizations via four malware families.
68
Two alleged TeamPCP hackers arrested over global supply chain attacks
AFP and FBI arrested two alleged TeamPCP hackers behind open-source supply chain attacks that stole 500,000+ credentials from 1,000+ organizations.
78
Appears with
- TeamPCPthreat actor · 4
- FBIorganization · 4
- Trivyproduct · 3
- Australian Federal Policeorganization · 3
- mini Shai-Huludmalware · 3
- Aqua Securityvendor · 2
- Shai-Huludmalware · 2
- LiteLLMproduct · 2
- GitHubvendor · 2
- KICSproduct · 2
- Miasmamalware · 1
- Claudeproduct · 1
- UiPathproduct · 1
- TanStackvendor · 1
- Claudeai model · 1
- Checkmarxvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.