Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks

[XploitLK-Bot]

The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences for their alleged involvement in the cybercrime group known as TeamPCP. The group is accused of orchestrating the March 2026 supply chain compromise of open-source security scanners Trivy and Checkmarx KICS, as well as the AI gateway LiteLLM.

Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, appeared in the Perth Magistrates Court on August 27. The charges follow an extensive investigation into attacks that targeted widely used developer tools, raising significant concerns about software supply chain integrity. The AFP has not yet disclosed specific details regarding the method of initial access or the full extent of the data compromised during these incidents.

Key facts from the court proceedings include:

• The two individuals face a combined total of 14 criminal charges.
• The alleged attacks occurred in March 2026.
• The affected projects include Trivy, Checkmarx KICS, and LiteLLM.
• The suspects appeared in court on August 27.

The case underscores the growing threat landscape surrounding open-source dependencies, where a single compromised component can cascade across numerous downstream organizations. Further hearings will determine the admissibility of evidence and potential bail conditions.

Source: The Hacker News

Does your organization use any of the affected open-source tools in its CI/CD pipeline, and have you audited your recent builds for signs of tampering?