Vendor

Telnyx

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 27, 2026 · last 18d ago

Timeline2 articles

Risky Bulletin: Two TeamPCP members arrested in Australia

Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.

The AFP arrested alleged TeamPCP leader Ruben Thomson, 21, and Louis Gaebler, 23, near Perth; both were charged and remain in custody. The group inserted a self-spreading credential-stealing worm into open-source projects including Trivy, KICS, LiteLLM, and Telnyx, harvesting more than 500,000 credentials used for network access, ransomware, extortion, and sales. About 78,000 tokens and secrets from nearly 2,200 organizations leaked online last month, and the FBI supported the investigation that began in April.

Risky Business NewsAug 28, 04:40 UTC · 18d agoPolicy & legal in the wild

Two alleged TeamPCP hackers arrested over global supply chain attacks

AFP and FBI arrested two alleged TeamPCP hackers behind open-source supply chain attacks that stole 500,000+ credentials from 1,000+ organizations.

Australian Federal Police, working with the FBI and Western Australia Police, arrested a 21-year-old from Cottesloe and a 23-year-old from Mandurah on August 26, 2026, over alleged membership in the TeamPCP cybercrime group. The group allegedly planted malicious code in open-source packages, harvesting credentials, authentication tokens and at least 300 GB of data from over 1,000 organizations, with remediation costs estimated in the hundreds of millions of dollars. TeamPCP has been linked to supply chain attacks on GitHub, Telnyx, LiteLLM, Aqua Trivy, Checkmarx KICS, TanStack, MistralAI and Red Hat using a cloned self-replicating worm dubbed Shai-Hulud. Researchers note TeamPCP cloned the Shai-Hulud worm but was not behind the original 2025 attacks.

Help Net SecurityAug 27, 00:00 UTC · 19d agoThreat actor

Appears with

vendor LiteLLM 2 organization FBI 2 threat actor TeamPCP 2 organization Australian Federal Police 1 organization Western Australia Police Force 1 product KICS 1 product Trivy 1 vendor Aikido 1 vendor Aqua 1 vendor Checkmarx 1 vendor GitHub 1 vendor KICS 1 vendor MistralAI 1 vendor Red Hat 1 vendor TanStack 1 vendor Trivy 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.