Trivy Scanner Compromised by TeamPCP — CanisterWorm Now Self-Propagating Across 47 npm Packages
Ars Technica·high signal
Threat actors hijacked 75 of 76 Trivy release tags and the trivy-action GitHub Action, injecting a credential stealer that dumps Runner.Worker memory and exfiltrates SSH, cloud, and Kubernetes secrets encrypted with AES-256+RSA-4096. The same TeamPCP group has since launched CanisterWorm, a self-spreading worm that has now infected 47 npm packages. Ars Technica called it a rotate-your-secrets weekend for any team using Trivy in CI/CD.