2026-03-19 · 2026-Q1
Trivy GitHub Action Compromise by TeamPCP
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Vendor patch
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Not applicable
Target
Aqua Security Trivy scanner
Impact
76 of 77 version tags redirected to malicious commits; Runner.Worker memory dumped; SSH, cloud, K8s secrets harvested; 1,000+ SaaS environments compromised downstream
Root cause
Service account compromise via prior incompletely remediated incident
Sources
Catalog
Cite this: AgentProv incident record: Trivy GitHub Action Compromise by TeamPCP (2026-03-19). https://agentprov.com/incidents/2026-03-19-trivy-github-action-compromise-by-teampcp
Related
- Same event · 2026-03-24LiteLLM Supply Chain Attack by TeamPCPL1Credential