#1
BleepingComputer
general
March 21, 2026 at 17:30 UTC
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
By Lawrence Abrams
AI Summary
The Trivy vulnerability scanner suffered a supply-chain attack by threat actors TeamPCP, who compromised official releases and GitHub Actions to distribute credential-stealing malware. This attack impacted the widely-used open-source scanner maintained by Aqua Security, demonstrating how critical security tools can become vectors for further compromise.
Relevance score: 95.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →