Plan
active
Two Alleged TeamPCP Supply-Chain Hackers Arrested in Australia
- Engineer — Learn: TeamPCP allegedly planted malicious open-source packages in the longest-running supply-chain attack spree on record; no specific package names are yet attributed in this report, so monitor follow-on coverage for affected libraries and run a dependency audit once IOCs are published.
- SOC/IR — Learn: No IOCs or ATT&CK-mappable TTPs are provided in current reporting; treat this as a campaign retrospective to inform supply-chain threat modeling once fuller technical details emerge from the prosecution.
- Leader — Plan: A group blamed for compromising thousands of businesses via malicious open-source software has been arrested; brief leadership on supply-chain risk posture this quarter and establish a watch for any vendor or package attribution that surfaces from the AFP investigation.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.