CanberraA Mandiant analyst sat inside TeamPCP from March.

Google warned victims from inside a group that breached more than 1,000 companies.

TeamPCP poisoned open-source packages, stole developers’ credentials and reused them to poison more, Google’s Austin Larsen said.

Australia charged two men in their early 20s with hacking crimes.

How each outlet framed it
Ars Technica
reveals Google's undercover researcher infiltrated group during attack, enabling real-time monitoring and victim disruption

Sources: Ars Technica