Trivy Vulnerability Scanner Compromised to Inject Malicious Scripts That Steal Credentials

A highly sophisticated supply chain attack has successfully compromised the official Trivy GitHub Actions repository, severely impacting continuous integration environments. Discovered on March 19, 2026, this breach represents the second major security incident to strike the Trivy ecosystem this month…

Read more →

The post Trivy Vulnerability Scanner Compromised to Inject Malicious Scripts That Steal Credentials appeared first on IT Security News.