Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks

The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP, the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM. Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, appeared in Perth Magistrates Court on August 27,

Reported facts: Australian Federal Police charged two men in connection with TeamPCP, a cybercrime group allegedly behind the March 2026 compromise of open-source security scanners Trivy and Checkmarx KICS, as well as the AI gateway LiteLLM. These incidents constitute significant supply chain attacks affecting both security tooling and an AI infrastructure component, indicating real-world exploitation of trusted open-source projects. RealGround analysis: This case highlights the need for rigorous AI supply chain risk management, including SBOM-driven dependency tracking, integrity verification, and continuous red teaming of AI gateways and associated tooling. Organizations relying on open-source scanners and AI orchestration layers should treat them as critical attack surfaces, with formal controls for provenance, update validation, and rapid incident response when upstream projects are compromised.