Alleged TeamPCP Hackers Charged in Australia Over Trivy, Checkmarx KICS, and LiteLLM Supply Chain Attacks

The Australian Federal Police charged two Western Australian men — Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21 — with a combined 14 offences over their alleged role in TeamPCP. The group is blamed for the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS, along with the AI gateway LiteLLM. Both suspects appeared in Perth Magistrates Court on August 27.

Krebs on Security separately described TeamPCP as responsible for the longest-running software supply chain attack spree to date, targeting thousands of global businesses through malicious open-source packages.