PERTH, Australia — In a coordinated international operation involving the Australian Federal Police (AFP), the Federal Bureau of Investigation (FBI), and Western Australia Police, authorities have arrested two men suspected of orchestrating the operations of TeamPCP. The prolific cybercrime syndicate is blamed for executing the longest-running and most destructive software supply chain attacks in internet history.

The suspects, residents of Western Australia aged 21 and 23, were taken into custody during morning raids in Perth. Australian Broadcasting Corporation (ABC) news later confirmed the identity of the 21-year-old as Ruben Ian Thomson of Cottesloe, who operated under various digital aliases including "Ellis," "BulkDMT," and "Deadcatx3." The 23-year-old suspect was identified as Michael Gaebler. Both men face a combined total of 14 serious cybercrime offenses.

The arrests mark a pivotal turning point in an international hunt for a decentralized group of threat actors whose malicious open-source campaigns have compromised thousands of global enterprises, breached cloud infrastructures, and humiliated major technology conglomerates, including Microsoft.

Main Facts

TeamPCP burst onto the global threat landscape in late 2025, specializing in software supply chain attacks. Rather than targeting individual corporate networks directly, the syndicate infected foundational open-source code repositories, leveraging the inherent trust developers place in third-party libraries.

The cornerstone of their campaign was a self-propagating malware worm dubbed Shai-Hulud. By compromising the credentials of legitimate developers on public repositories such as GitHub and Node Package Manager (NPM), TeamPCP embedded malicious payloads into widely used software development kits. When unsuspecting developers downloaded these packages, the malware infected their local machines, harvested their credentials, and automatically targeted downstream repositories.

The syndicate’s footprint is staggering:

• The LiteLLM Breach: In March 2026, TeamPCP compromised LiteLLM, an open-source gateway connecting users to over 100 large language models (LLMs). According to security firm CloudSEK, this single attack harvested cloud service keys and application secrets from more than 2,500 organizations, including elite global technology companies.
• The GitHub Compromise: In May 2026, the group claimed credit for compromising at least 3,800 code repositories on Microsoft-owned GitHub after a developer installed a malicious code extension.
• The "Cybercats" Ecosystem: Security researchers emphasize that TeamPCP functions less like a rigid mafia organization and more like an ad-hoc cooperative of elite exploit developers, data brokers, and extortionists communicating via secure Matrix and Telegram channels under the banner of "Cybercats."

Chronology of an Escalating Campaign

The trajectory of TeamPCP’s operations showcases a rapid evolution from isolated credential theft to industrialized, automated software poisoning:

• Late 2025: TeamPCP emerges, introducing the Shai-Hulud worm to poison open-source supply chains and extort corporate entities for profit. Concurrently, Ruben Thomson (operating as "BulkDMT" and "EllisD25") reconnects with malware circles after a brief period of sobriety, utilizing stolen credentials to fund living expenses and substance use.
• March 2026: TeamPCP executes its high-profile strike against LiteLLM, exposing critical secrets across thousands of enterprise cloud environments. Around this time, Thomson reportedly steps back from primary leadership, though the group’s infrastructure continues running autonomously.
• May 2026: The source code for Shai-Hulud 3.0 is published online. TeamPCP launches an illicit hacking competition on Telegram, offering Monero (XMR) cryptocurrency prizes to participants who can compromise the highest number of software downloads, effectively crowdsourcing talent and illicit access at scale.
• June–July 2026: Independent security investigations converge on Thomson’s digital footprint. Investigators unearth fatal operational security (OPSEC) failures, including the use of personal email addresses, recycled passwords, and a HackerOne bug bounty profile registered under the alias "Deadcatx3."
• August 2026: Joint international law enforcement agencies execute synchronized raids in Western Australia, arresting Thomson and Gaebler. Both are remanded in custody following an initial appearance at the Perth Magistrates Court.

Supporting Data and Operational Security Failures

Despite their technical sophistication in circumventing modern code repositories, TeamPCP’s leadership suffered from catastrophic operational security (OPSEC) lapses. Investigators from firms like SpyCloud, Intel 471, and independent journalists traced the syndicate’s core operators through a trail of digital breadcrumbs spanning nearly a decade.

Thomson’s real-world identity was ultimately exposed through a constellation of recycled artifacts:

1. Email Trail: Historical breach data revealed that the email address [email protected]—used to register accounts on illicit forums like Breachforums—was linked to earlier accounts on Raidforums under the handle "ChristmasSnow." These accounts originated from residential Internet Protocol (IP) addresses in Perth, Australia.
2. DNS and Asset Registrations: Passive DNS records and business filings connected Thomson’s family to domains such as securecomputing.au and thomsonfamily.net.au. Furthermore, Thomson incorporated corporate entities in Australia with ironic names like OPSEC Express and Tensor Industries, directly reusing cybercrime monikers for official business registrations.
3. The HackerOne Blunder: In June 2025, an account was registered on the vulnerability coordination platform HackerOne under the literal name "Ruben Thomson" using the handle Deadcatx3—an alias security firms had already firmly attributed to TeamPCP.

Google Threat Intelligence Group principal analyst Austin Larsen noted that TeamPCP’s core strength lay not in institutional discipline, but in the individual ingenuity of its members operating as a peer community with a shared technical vision.

Official Responses and Legal Proceedings

The Australian Federal Police formally announced the disruption of the syndicate in a joint media release detailing the collaborative efforts of the AFP, the FBI, and Western Australia Police.

"Two men from Western Australia, aged 21 and 23, have been arrested in connection with a sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses," the AFP stated.

During their initial hearing at the Perth Magistrates Court, it was revealed that Thomson was formally denied bail, while legal representation for Gaebler did not formally request his release. Both men remain detained in custody pending their next mandatory court appearance scheduled for September 18. They face a combined total of 14 cybercrime-related charges, with federal prosecutors indicating that additional charges could be brought forward as forensic analysis of seized electronic devices continues.

Broader Implications for Software Supply Chain Security

Security analysts suggest that the rise and fall of TeamPCP has fundamentally altered the threat landscape for software development, serving as a harsh wake-up call for the entire technology sector.

Charlie Eriksen, a security researcher at Aikido Security, highlighted the unique nature of the group:

"They are not a state actor, not quite organized cybercrime, and not purely ideological. Their motivations seem to mix money, disruption, attention, and ideology."

Eriksen noted that the integration of Large Language Models (LLMs) into the cybercrime ecosystem has compressed the traditional gap between vulnerability research and operational execution. Threat actors who lack formal enterprise discipline can now operate at an industrial scale, generating massive amounts of digital noise and leaving behind avoidable forensic evidence.

Paradoxically, security experts argue that TeamPCP’s aggressive campaigns have yielded unexpected benefits for global defensive posture. By relentlessly exposing the vulnerabilities of the trusted publishing model, the group effectively forced major platforms to adopt structural safeguards.

In response to the Shai-Hulud worm, Microsoft-owned GitHub implemented a mandatory three-day "cooldown" period for Dependabot updates in late July, allowing security maintainers adequate time to vet newly published package dependencies before automated deployment. Similar cooldown protocols have since been rapidly adopted across Python and JavaScript ecosystems.

As Eriksen concluded:

"TeamPCP’s legacy is that they achieved in the span of a few months what the supply chain security community has been unable to do for years. They managed to wake up Microsoft to the fact that they had become negligent in terms of security."