An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang

A wide-ranging report describes TeamPCP, a criminal group that executed cascading software supply‑chain compromises—injecting malware into open‑source projects, stealing developer accounts, and automating spread with a worm—leading to breaches of hundreds to thousands of organizations. Google Threat Intelligence and Mandiant infiltrated the group, provided intelligence to warn victims and aid disruption, and Australian authorities arrested two alleged key members.