The TeamPCP hackers behind the Trivy supply-chain attack continued to target Aqua Security, pushing malicious Docker images ...
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...
An AI-assisted campaign is spreading more than 300 poisoned packages for diverse assets ranging from developer tools to game ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of ...