Trivy supply-chain attack spreads to Docker, GitHub repos
TeamPCP hackers targeted Aqua Security via a supply-chain attack, pushing malicious Docker images and tampering with GitHub repositories.
The TeamPCP hackers behind the Trivy supply-chain attack continued to target Aqua Security, pushing malicious Docker images and hijacking the company's GitHub organization to tamper with dozens of repositories. [...]