Hackers have compromised virtually all versions of Aqua Securitys widely used Trivy vulnerability scanner in an ongoing supply chain attack that could have wide ranging consequences for developers and the organizations that use them. Trivy maintainer Itay Shakury confirmed the compromise on Friday, following rumors and a thread , since deleted by the attackers, discussing the incident. The attack began in the early hours of Thursday. When it was done, the threat actor had used stolen...
