Trivy Compromised by Credential-Stealing Malware

On March 19, 2026, attackers compromised the popular open-source vulnerability scanner Trivy, injecting credential-stealing malware into its official releases and GitHub Actions, potentially exposing sensitive data from thousands of continuous integration and continuous deployment pipelines worldwide.

The breach, linked to a cybercriminal group known as TeamPCP, exploited credentials stolen in a prior incident last month involving Trivy's VS Code extension. Maintainers at Aqua Security had rotated some secrets following that event, but the process left residual access intact, allowing the attackers to perform authenticated operations without triggering standard alerts. Using a compromised personal access token with write permissions, the threat actors force-pushed malicious code to 75 of 76 version tags in the trivyaction GitHub Action repository and seven tags in setuptrivy, as well as the Trivy binary version 0.69.4. This technique redirected trusted version references to new, malicious commits while spoofing metadata like timestamps and author details to evade detection. The malicious artifacts appeared in GitHub releases, Docker Hub, the GitHub Container Registry, and...