Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack
CYBERSECURITY FEATURED ANALYSIS

Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

BY

Rami McCarthy

SOURCE

Wiz Blog | RSS feed

DATE

READ

1 min read

On March 19, 2026, threat actors injected credential-stealing malware into Aqua Security’s Trivy scanner and related GitHub Actions. Learn how “TeamPCP” executed this breach and how to audit your environment.

On March 19, 2026, threat actors injected credential-stealing malware into Aqua Security’s Trivy scanner and related GitHub Actions. Learn how “TeamPCP” executed this breach and how to audit your environment.