Trivy Supply Chain Attack Expands to Compromised Docker Images

#1

Post by feross » Mon, Mar 23, 2026, 3:02 AM UTC

Trivy Supply Chain Attack Expands to Compromised Docker Images
socket.dev

Re: Trivy Supply Chain Attack Expands to Compromised Docker Images

#2

Post by gnabgib » Mon, Mar 23, 2026, 3:09 AM UTC

Mentioned by both

Trivy (aquasecurity) (84 points, 3 days ago, 30 comments) https://news.ycombinator.com/item?id=47450142

Wiz (3 points) https://www.wiz.io/blog/trivy-compromised-teampcp-supply-cha...

Re: Trivy Supply Chain Attack Expands to Compromised Docker Images

#3

Post by codeinchaos » Mon, Mar 23, 2026, 5:53 AM UTC

gnabgib wrote: post #2

Mentioned by both Trivy (aquasecurity) (84 points, 3 days ago, 30 comments) https://news.ycombinator.com/item?id=47450142 Wiz (3 points) https://www.wiz.io/blog/trivy-compromised-teampcp-supply-cha...

this reads like new development

Re: Trivy Supply Chain Attack Expands to Compromised Docker Images

#4

Post by gnabgib » Tue, Mar 24, 2026, 12:12 AM UTC

codeinchaos wrote: post #3

gnabgib wrote: post #2

Mentioned by both Trivy (aquasecurity) (84 points, 3 days ago, 30 comments) https://news.ycombinator.com/item?id=47450142 Wiz (3 points) https://www.wiz.io/blog/trivy-compromised-teampcp-supply-cha...

this reads like new development

It tries to, and it's not.