The Google Threat Intelligence team recently disclosed at a security conference that a security researcher from its subsidiary, Mandiant, successfully infiltrated the core chat group of the TeamPCP hacking syndicate. From this vantage point, the analyst continuously monitored the group's massive supply chain attacks targeting the open-source software ecosystem. Naturally, this undercover operation yielded significant advantages. Long before the hackers could launch their strikes, Google proactively assisted affected enterprises and cloud service providers in securing their stolen credentials.