---
id: 6744
title: "Good riddance, TeamPCP. Now for the hard part."
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/teampcp-arrested-supply-chain"
published_at: "2026-08-27T00:00:00Z"
tags: ["supply-chain", "threat-intelligence", "malware", "npm", "aikido", "cybercrime", "shai-hulud", "software-supply-chain", "teampcp"]
phying_url: "https://phying.com/item/6744"
lang: en
---

# Good riddance, TeamPCP. Now for the hard part.

## Summary

After AFP, FBI and WA Police announced the arrest of two men in their early 20s alleged to be TeamPCP, Aikido reflects on the group that cloned the Shai-Hulud worm (distinct from the original S1ngularity attacks) and blurred state, criminal and ideological lines, noting the ecosystem's core problems remain.

## Why it matters

This incident analysis explains systemic gaps in package registry security exposed by recent malicious campaigns.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-08-27T00:00:00Z
- **Original:** https://www.aikido.dev/blog/teampcp-arrested-supply-chain
- **Phying News:** https://phying.com/item/6744