Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

Aqua Security’s Trivy vulnerability scanner and related GitHub Actions were compromised by threat actors who injected credential-stealing malware, enabling widespread exfiltration of secrets and persistence mechanisms across developer and CI/CD environments—prompting urgent audits and incident response actions for all users.