# TeamPCP cybercrime syndicate investigation > Live situation record from CLSTR: https://clstr.news/situations/teampcp-cybercrime-syndicate-investigation > Updated: 2026-08-31T03:35:02.000Z. Sources: 14. Developments: 2. Australian and US authorities have taken action against the TeamPCP cybercrime syndicate, which is accused of conducting large-scale supply chain attacks. The group allegedly utilized the ‘Shai-Hulud worm’ to inject malicious code into open-source software repositories, targeting npm packages and developer credentials. Two men, aged 21 and 23, were arrested in Western Australia following a joint investigation by the Australian Federal Police, the Western Australia Police Force, and the FBI. The suspects face charges including data intrusion, identity crime, and cryptocurrency-based money laundering. Authorities allege the group targeted specific security tools such as Trivy, Checkmarx KICS, and the AI gateway LiteLLM. The scale of the breach is significant, with investigators estimating that more than 1,000 organizations globally—including government agencies, academic institutions, and the European Commission—were potentially compromised. The attacks resulted in the theft of approximately 500,000 credentials and the exfiltration of at least 300 gigabytes of data. The FBI has advised impacted organizations to rotate all cloud credentials and CI/CD secrets due to the persistent risk of the stolen data. ## Timeline ### 2026-08-31: Australia charges two men in TeamPCP supply chain cyberattacks Two Australian men face charges for their alleged roles in the TeamPCP cybercrime group, which conducted global supply chain attacks targeting open-source security tools and compromising thousands of entities. 4 sources. https://clstr.news/cluster/australia-charges-two-men-in-teampcp-supply-chain-cyberattacks ### 2026-08-27: Australia arrests two men linked to global TeamPCP cybercrime syndicate Two men in Australia have been charged for their alleged roles in the TeamPCP cybercrime syndicate, which conducted global supply chain attacks compromising over 1,000 organisations and stealing 500,000+ logins 10 sources. https://clstr.news/cluster/australian-men-arrested-for-alleged-teampcp-supply-chain-attacks --- Cite as: TeamPCP cybercrime syndicate investigation. CLSTR, https://clstr.news/situations/teampcp-cybercrime-syndicate-investigation