Supply Chain Incident
Aqua Trivy CI/CD supply-chain compromise
Attackers compromised Trivy release and GitHub Action distribution paths, causing affected CI/CD environments to run credential-stealing code through trusted scanner workflows.
ConfidenceHigh
Evidence LevelVendor
Attack StageCi Cd Compromise
Source Artifact DivergenceNo
Attribution ConfidenceLikely
Affected Packages
Affected Releases
No structured records.
Repositories
Organizations
Maintainers
No structured records.
Threat Actors
Campaigns
Build Systems
- GitHub Actions
Distribution Channels
- Docker Hub
- GitHub Actions Marketplace
Compromised Accounts
- Aqua Security release credentials
Connected Entities
- Aqua SecurityOrganization
- Aqua Security release credentialsCompromised Account
- aquasecurity/setup-trivyPackage
- aquasecurity/trivyRepository
- aquasecurity/trivy-actionPackage
- Docker HubDistribution Channel
- GitHub ActionsBuild System
- GitHub Actions MarketplaceDistribution Channel
- TeamPCPThreat Actor
- TeamPCP Multi-Ecosystem Supply Chain CampaignCampaign
Attribution Evidence
Microsoft describes the Trivy campaign as activity attributed to the threat actor identifying as TeamPCP.
The Trivy compromise is the first modeled node in the TeamPCP 2026 multi-ecosystem supply-chain campaign.
References
- Trivy Security incident 2026-03-19Aqua Security · 2026-03-20
- Trivy ecosystem supply chain temporarily compromisedGitHub Advisory Database · 2026-03-21
- Guidance for detecting, investigating, and defending against the Trivy supply chain compromiseMicrosoft Security Blog · 2026-03-24
- CVE-2026-33634 RecordCVE.org · 2026-03-24