Two TeamPCP Suspects Arrested in Australia

The Australian Federal Police (AFP) has announced the arrest of two men from Western Australia, aged 21 and 23. They are suspected of involvement with TeamPCP — in the words of investigators, a “sophisticated cybercriminal syndicate that built malicious open-source software to rob thousands of companies around the world.” Police did not release the suspects' names, but journalist Brian Krebs claims he identified the 21-year-old back in June and has been in contact with him ever since.

How the group operated

TeamPCP made its presence known in late 2025, embedding malicious code into hundreds of open-source tools and extorting money from its victims. Its key weapon was the self-propagating worm Shai-Hulud: it infected packages whose maintainers had had their GitHub or NPM credentials stolen, harvested new keys, and published poisoned versions of yet other libraries. The cycle repeated, and the network of compromised environments kept growing.

The group also practiced “cyclical recruitment”: after releasing the source code of the worm's third version, it launched a contest offering a $1,000 prize in Monero to whoever carried out the most sweeping attack. Participants were ranked by the number of downloads of the compromised packages — in other words, they were directly encouraged to go after the most popular libraries. As Dataminr noted, the prize was merely a “floor”: the real goal was talent scouting and buying up the accesses that resulted.

Among the victims were the LiteLLM gateway (according to CloudSEK, cloud keys for more than 2,500 organizations were leaked) and GitHub itself: TeamPCP claimed to have compromised no fewer than 3,800 repositories.

An operational security failure

As Krebs describes it, TeamPCP is not a rigid structure with a single boss, but a community of individual specialists from various gangs who communicated in the Matrix chat “Cybercats.” The journalist identifies the group's center of gravity as a person going by the handle Ellis, who admitted he had left the operation back in March 2026. In an interview he spoke about homelessness, battling addiction, and earning only around $20,000, conceding that without papers or qualifications he could not find legal work in IT.

The irony is that the suspects failed to keep themselves well hidden: one of the associated companies was named OPSEC Express, and on the bug bounty platform HackerOne the handle Deadcatx3 surfaced — one analysts had long attributed to TeamPCP.

A side effect

Charlie Eriksen, a researcher at Aikido Security, calls TeamPCP an example of a new type of attacker — not state-sponsored, not classic organized crime, and not purely ideological. In his view, large language models have dramatically shortened the path from reading about an attack technique to actually using it. Yet, paradoxically, he considers the Shai-Hulud worm “the best thing that ever happened to supply-chain security”: it was precisely after these attacks that GitHub, along with the Python and JavaScript ecosystems, introduced “cooling-off periods” for new package versions.

The detainees face a combined total of 14 counts of cybercrime; they are due to appear before the Perth Magistrates Court.

Source: Krebs on Security