Two alleged TeamPCP hackers arrested over global supply chain attacks

Australian and US authorities arrested two men accused of belonging to TeamPCP, a cybercriminal group that inserted malicious code into open-source repositories and operated a self-replicating worm to steal credentials and exfiltrate data; the campaign reportedly affected more than 1,000 organizations, stole over 500,000 credentials and at least 300 GB of data, and resulted in substantial global remediation costs.