Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others

Australian authorities arrested two alleged members of TeamPCP accused of conducting widespread software supply‑chain attacks that injected credential‑stealing malware into popular open‑source projects (including an incident involving the Trivy scanner), compromising over a thousand organizations and reportedly stealing more than 500,000 credentials; seized data and devices are being held and victims will be notified.