Security NewsHighIncidentsupply chain
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
UnknownMar 21, 2026(about 3 hours ago)
The Trivy vulnerability scanner was compromised in a supply-chain attack, distributing credential-stealing malware through official releases and GitHub Actions.
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed credential-stealing malware through official releases and GitHub Actions. [...]