TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions | Sysdig

The TeamPCP threat actor escalated their supply chain attack by leveraging stolen credentials from a compromised Trivy GitHub Action to poison Checkmarx’s GitHub Action, enabling widespread credential theft and data exfiltration across CI/CD pipelines through stealthy, behaviorally identical payloads.