The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.