Flare unmasks the Australian operator it says is behind TeamPCP (two people have been arrested), tracing how the group compromised five software ecosystems by exploiting a misconfigured GitHub Actions workflow in Aqua Security’s Trivy scanner. The stolen service token let them ship backdoored releases into packages downloaded 95 million times a month. Wiz’s analysis of the Trivy compromise shows the attackers kept access after Aqua’s incomplete containment and force-pushed 75 of 76 trivy-action tags to malicious commits. The Australian Federal Police charged a 21-year-old and a 23-year-old from Western Australia with 14 offences between them after a joint operation with the FBI and WA Police. The group graduated from opportunistic cloud exploitation to cascading CI/CD compromise of the very security tools other organizations trust, and the recommended defenses are the familiar liturgy: credential inventory, narrow token scopes, SHA-pinned actions, and watching your security tooling for outbound connections it has no business making. When the supply chain attack arrives through your vulnerability scanner, the food chain has officially inverted.
