# Australian Authorities Arrest TeamPCP Hackers Linked to Supply Chain Attacks

*Published August 28, 2026*
*Source: [https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia/](https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia/)*

## Executive Summary

Australian authorities have arrested two men linked to TeamPCP, a group responsible for widespread software supply chain attacks. These arrests are a critical step in disrupting the group's operations, which have targeted thousands of businesses globally.

## Article

Australian Federal Police have apprehended two young men in Western Australia, aged 21 and 23, believed to be part of TeamPCP, a cybercrime group notorious for its extensive software supply chain attacks. This group has embedded harmful code into open-source tools, targeting thousands of businesses worldwide. The suspects were allegedly involved in creating and distributing malicious software, which compromised corporate cloud environments by using a worm called Shai-Hulud. This worm allowed attackers to steal credentials from developers on platforms like GitHub and NPM, further spreading the malicious code.

TeamPCP has also engaged in recruitment tactics by hosting contests to incentivize the spread of their malware. Participants were rewarded with virtual currency for compromising popular code libraries, thus expanding the group's reach. This strategy underscores the group's cyclical exploitation of software developers and their interest in acquiring new talent.

The group's activities have not only affected thousands of organizations but have also impacted major tech companies by harvesting sensitive information through compromised AI infrastructure. The arrest highlights the collaborative nature of cybercriminal networks, where individual actors often work together, sharing resources and knowledge to achieve common objectives.

George Prepakis, known in cyber circles as @kernelstub, is identified as a central figure in this network. He has been instrumental in organizing and facilitating communication among various cybercrime entities through a chat server called Cybercats. The recent arrests are a significant development in disrupting the operations of TeamPCP and similar cybercriminal collaborations.