Weaponizing the Watcher: Analyzing the TeamPCP Trivy Supply Chain Compromise

Executive Summary On March 19, 2026, a highly sophisticated CI/CD-focused supply chain attack targeted Trivy, the widely adopted open-source vulnerability scanner maintained by Aqua Security. Attribut