Trivy compromise turns a security scanner into a credential risk

Microsoft’s March investigation described a supply-chain attack affecting Trivy’s scanner binary and associated GitHub Actions. The reported compromise used access left over from an earlier incident to insert credential-stealing code into software organisations relied on for security checks. The account attributes the campaign to a group identifying itself as TeamPCP.

The significance for build teams is the environment in which a scanner runs: it may encounter cloud credentials and other sensitive CI/CD material. A dependency intended to find vulnerabilities can therefore become a route to those secrets. Microsoft’s report was updated as the campaign expanded, including an April account of additional affected packages. Those later observations are distinct from the initial March disclosure and should not be folded into an earlier incident date.