Australia arrests alleged TeamPCP hackers behind supply-chain attacks

Australian authorities arrested two men alleged to be members of TeamPCP, a loose-knit hacking collective blamed for widespread developer supply-chain attacks that injected malicious code into open-source repositories. The campaign reportedly impacted numerous high-profile packages and organizations, potentially compromising over a thousand entities, stealing ~500,000 credentials, and exfiltrating at least 300GB of data; investigators seized devices and have charged the suspects with multiple computer offenses while warning further arrests are possible.