Trivy Compromised by "TeamPCP" | Wiz Blog

www.wiz.io

cross-posted to:
hackernews@lemmy.bestiver.se

Trivy Compromised by "TeamPCP" | Wiz Blog

www.wiz.io

cm0002@literature.cafe to

cybersecurity · 1 month ago

cross-posted to:
hackernews@lemmy.bestiver.se

Breaking down the March 2026 Trivy supply chain attack. TeamPCP compromised trivy + trivy-action & setup-trivy GitHub Actions, deploying credential stealers.

You must log in or # to comment.

Chat

cybersecurity

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

56 users / day
303 users / week
796 users / month
2.11K users / 6 months
918 local subscribers
6.09K subscribers
1.08K Posts
2.36K Comments
Modlog