Australian Police Charge Two Men Over Alleged TeamPCP Supply Chain Attacks on Trivy, Checkmarx KICS, and LiteLLM
AFP alleges the duo compromised widely used open-source security tools in March 2026, marking a significant crackdown on software supply chain threats.
Key Takeaways
- Two Western Australian men have been charged by the AFP in connection with the TeamPCP cybercrime group.
- The alleged attacks targeted Trivy, Checkmarx KICS, and LiteLLM in March 2026.
- The charges relate to a total of 14 offences and involve allegations of supply chain compromise against widely used open-source tools.
Related Security News
Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.
