On the morning of March 24, 2026, tens of thousands of software developers working on AI applications were unknowingly exposed to malware.
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...