Vendor

Trivy

0 mentions in 7 days · 1 in 30 days · 2 total · first seen Aug 13, 2026 · last 18d ago

Timeline2 articles

Risky Bulletin: Two TeamPCP members arrested in Australia

Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.

The AFP arrested alleged TeamPCP leader Ruben Thomson, 21, and Louis Gaebler, 23, near Perth; both were charged and remain in custody. The group inserted a self-spreading credential-stealing worm into open-source projects including Trivy, KICS, LiteLLM, and Telnyx, harvesting more than 500,000 credentials used for network access, ransomware, extortion, and sales. About 78,000 tokens and secrets from nearly 2,200 organizations leaked online last month, and the FBI supported the investigation that began in April.

Risky Business NewsAug 28, 04:40 UTC · 18d agoPolicy & legal in the wild

153GB of stolen credentials surface after LiteLLM supply chain attack

153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.

Hudson Rock obtained and analyzed a 153GB archive stolen in the LiteLLM supply chain attack, containing 433,909 files with secrets attributed to 2,488 corporate domains, including AWS, Samsung, Cisco, Salesforce, NVIDIA, Microsoft and Siemens. TeamPCP compromised Trivy on March 19, 2026, stole LiteLLM's PyPI publishing tokens through the build pipeline, and published malicious LiteLLM versions 1.82.7 and 1.82.8 on March 24. CloudSEK separately estimated close to 2,500 exposed organizations, and Kevin Beaumont confirmed the data is legitimate. Hudson Rock is running a global ethical disclosure effort and urges organizations to rotate secrets before the trove leaks publicly.

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2026Data breach in the wild

Appears with

threat actor TeamPCP 2 vendor LiteLLM 2 organization CloudSEK 1 organization FBI 1 organization Hudson Rock 1 product PyPI 1 vendor AWS 1 vendor Cisco 1 vendor KICS 1 victim Telnyx 1 vendor Microsoft 1 vendor NVIDIA 1 vendor Salesforce 1 vendor Samsung 1 vendor Siemens 1 vendor Telnyx 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.