Feed
Discussion
18h ago
From Security Tool to Credential Stealer: The TeamPCP Trivy Supply Chain Attack
TL;DR — Read This First On March 19, 2026 at approximately 17:43 UTC, threat actor group TeamPCP silently redirected trivy-action@0.34.2 — a real, trusted release already running in thousands of CI/CD
sammy-secops.hashnode.dev40 min read
#devsecops#cybersecurity#malware#supplychainsecurity#supply-chain-attack#github-actions-1#trivy#trivy-container-scan#secure-coding#ci-cd#cicd-security#cloud-security#threat-intelligence#threat-hunting#threatdetection#sdlc#malware-attacks
Responses
No responses yet.