Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian Federal Police charges two men with 14 offences over TeamPCP supply chain backdoors in Trivy, Checkmarx KICS, and LiteLLM affecting 1,000+ organizations.
The Australian Federal Police charged two Western Australian men, aged 21 and 23, with 14 offences for their alleged principal roles in TeamPCP's March 2026 supply chain attacks; they appeared in Perth Magistrates Court on August 27, 2026. The group stole publishing credentials from trusted open-source projects and pushed poisoned releases across five ecosystems - GitHub Actions, Docker Hub, npm, PyPI, and OpenVSX - with LiteLLM's unpinned Trivy install enabling token theft and backdoored LiteLLM releases. The FBI said the malicious code potentially compromised more than 1,000 organizations, enabled theft of over 500,000 credentials, and exfiltrated at least 300 GB of data. Oligo Security linked the group's infrastructure to activity back to 2020, previously tracked as TA-NATALSTATUS and IronErn.
- LiteLLM's unpinned Trivy install let the poisoned scanner steal its publishing token
- FBI urges rotating CI/CD secrets, publishing tokens, and cloud credentials from exposure windows
- CloudSEK reconstructed exposure at 2,500+ organizations and roughly 434,000 CI/CD pipelines
- Confirmed leak-site victims numbered 16 organizations as of late March 2026
- Fresh npm wave poisoned keyv and cacheable packages on August 4, 2026
- Products
- LiteLLMTrivyCheckmarx KICS
- Threat actors
- TeamPCPTA-NATALSTATUSIronErn
- Countries
- Australia
From the original article
4 min read at thehackernews.com
The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP , the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.