Australian Police Charge Two Over TeamPCP Credential Theft

Australian authorities charged two men allegedly linked to TeamPCP after a coordinated supply-chain operation secretly injected credential-stealing and worm malware into popular open-source packages (PyPI, npm), potentially compromising 1,000+ organizations, exfiltrating ~300 GB of data and stealing over 500,000 credentials; affected tools include Trivy, KICS, LiteLLM and the Telnyx Python SDK, and notable malware families are CanisterWorm, SANDCLOCK, Mini Shai-Hulud and Miasma, with IOCs such as GitHub repos named tpcp-docs and docs-tpcp.