Topic: version spoofing

Trivy Scanner Compromised in Major Supply-Chain Attack

A supply-chain attack compromised nearly all versions of the Trivy vulnerability scanner after attackers used stolen credentials to force malicious code into its Git repository. The injected malware harvests sensitive data like GitHub tokens and cloud credentials from development pipelines and ma...