Australian authorities arrested two men accused of participating in cybercrimes for Team PCP, a prolific hacking group. The Australian Federal Police stated the men were charged with 14 offenses and lived in Western Australia towns of Cottesloe and Mandurah. Team PCP has carried out supply-chain attacks over nine months, compromising more than 1,000 organizations worldwide.

The group is known for embedding malware in open source software through CI/CD pipelines, using a self-propagating worm called Shai-Hulud. Once a package was compromised, the malware spread to future updates. When developers downloaded these packages through their CI/CD platforms, their software became infected.

The attacks have challenged law enforcement globally since the group emerged in December.