AI Weekly Malaysia

Australian Federal Police arrested two men in Perth accused of being members of TeamPCP, a cybercriminal group that compromised popular open-source projects to inject malicious code stealing credentials from downstream users. The group is blamed for breaching over 1,000 organizations and stealing more than 500,000 credentials, including via a compromise of the vulnerability scanner Trivy that affected companies like LiteLLM, AI recruiting startup Mercor, and others with access to GitHub and OpenAI.

Why: If you run Trivy or depend on open-source tools that touch your cloud credentials, this is a concrete reminder that supply-chain attacks on developer tooling can cascade into your infrastructure. Review whether any tools in your CI/CD pipeline have access to your cloud provider or API keys, and consider pinning versions and verifying checksums rather than pulling latest. The Trivy compromise specifically means any team that ran it during the attack window should rotate exposed credentials.

Australian Federal Police charged two Western Australian men, Louis Michael Gaebler (23) and Ruben Ian Thomson (21), with 14 offences over their alleged role in TeamPCP, the group behind the March 2026 supply-chain compromise of open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM. The FBI's July 2 advisory warns that over 1,000 organizations may be affected and urges rotating all CI/CD secrets, publishing tokens, and cloud credentials exposed during the compromise window, as exfiltrated data remains a persistent risk.

Why: If your team runs LiteLLM as an AI gateway or uses Trivy/Checkmarx KICS in CI pipelines and pulled updates around March 2026, you should rotate every CI/CD secret, publishing token, and cloud credential that was accessible during that window—the FBI explicitly states affiliated threat actors will weaponize exfiltrated credentials long after the initial compromise.