#sdlc

Apr 3, 2026 · 40 min read · 343 views

From Security Tool to Credential Stealer: The TeamPCP Trivy Supply Chain Attack

A deep dive into CI/CD trust abuse, GitHub Actions misconfigurations, tag poisoning, and large-scale credential exfiltration.

40 min read · 343 views