Australian cops cuff alleged TeamPCP masterminds

Australian Federal Police, assisted by the FBI, arrested two alleged leaders of TeamPCP accused of supply-chain attacks that inserted malicious code into open-source repositories (including the Shai-Hulud npm worm) to harvest credentials and exfiltrate data; authorities estimate over 1,000 organisations may have been affected, more than 500,000 credentials stolen, at least 300 GB exfiltrated, and remediation costs in the hundreds of millions of dollars. Investigators seized electronic devices, forensic analysis is ongoing, and further arrests or charges have not been ruled out.