A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of ...
Trivy supply chain attack pushed malicious Docker images on March 22, enabling credential theft and worm spread, impacting ...
A threat actor used the open source security tool to breach CI/CD workflows and steal cloud credentials, SSH keys, and other ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results