---
id: 6887
title: "Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack"
published_at: "2026-03-20T15:18:51Z"
tags: ["cloud", "supply-chain", "github-actions", "incident", "trivy", "teampcp", "aqua-security", "docker-hub"]
phying_url: "https://phying.com/item/6887"
lang: en
---

# Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

## Summary

Recapping the March 2026 Trivy compromise: TeamPCP injected malware into the scanner, trivy-action, and setup-trivy, and later fake Docker Hub images, harvesting cloud and CI/CD credentials.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-03-20T15:18:51Z
- **Original:** https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack
- **Phying News:** https://phying.com/item/6887