
The modern software supply chain faces a sophisticated new reality where even the most trusted security tools can be turned into delivery mechanisms for malicious payloads. Trivy, a widely adopted open-source vulnerability scanner maintained by Aqua Security, recently fell victim to a coordinated breach that saw 75 out of 76 version tags hijacked to distribute an information stealer. This incident










