Aqua Security Trivy supply-chain compromise distributes credential-stealing releases

On 19 March 2026, an attacker used compromised credentials to publish a malicious Trivy v0.69.4 release, replace Trivy GitHub Action tags with credential-stealing malware and distribute compromised artifacts through trusted release channels; additional malicious Docker Hub images followed on 22 March. Aqua's incident analysis linked the access to incomplete credential rotation after an earlier compromise. The poisoned Trivy supply chain subsequently provided a credential-theft path into other software vendors, including Checkmarx and BerriAI's LiteLLM, creating a documented downstream software-supply-chain propagation.