Fetching from the wire…
Security2026-08-29 · source-backed
The AFP charged Ruben Ian Thomson, 21, and Louis Michael Gaebler, 23, on August 26 with 14 combined offenses after Perth search warrants executed with WA Police and the FBI. Authorities say TeamPCP's poisoned components reached more than 1,000 organizations, enabled theft of over 500,000 credentials and at least 300GB of data, and left remediation costs in the hundreds of millions. The campaign exploited a misconfigured Trivy workflow in late February and pushed a malicious release through every distribution channel simultaneously on March 19. (Ars Technica)
Each link below shares sources, entities, or timing with this story.
TeamPCP criticizes Trivy / Shared entities / Earlier coverage
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover August, March, TeamPCP, Trivy; earlier August coverage from 2026-08-15.
TeamPCP criticizes Trivy / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover March, TeamPCP, Trivy; overlapping topics (credential, trivy).
TeamPCP criticizes Trivy / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover TeamPCP, Trivy; reported by the same outlet (arstechnica.com).
TeamPCP criticizes Trivy / Shared entities / Earlier coverage
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover March, TeamPCP, Trivy; earlier March coverage from 2026-03-27.
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover March, TeamPCP, Trivy; earlier March coverage from 2026-03-25.
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover March, TeamPCP, Trivy; earlier March coverage from 2026-03-24.
Linked by a graph relationship (TeamPCP criticizes Trivy); both cover March, TeamPCP; earlier March coverage from 2026-03-30.
Trivy criticizes LiteLLM / Shared entity: Trivy / Same source domain / Earlier coverage
Linked by a graph relationship (Trivy criticizes LiteLLM); both cover Trivy; reported by the same outlet (arstechnica.com).