TeamPCP Extends Trivy Supply-Chain Attack to Docker Hub and Aqua Security Repositories
Summary
Reports say TeamPCP accessed Aqua Security’s GitHub organization, tampered with repositories, and pushed Trivy Docker tags 0.69.5 and 0.69.6 containing infostealer indicators. Aqua rotated secrets, released safe versions, and engaged incident responders.
Key points
- Socket reported that Trivy Docker Hub tags 0.69.5 and 0.69.6, pushed March 22 without matching GitHub releases, contained indicators associated with the TeamPCP infostealer.
- Aqua said incomplete containment after an earlier incident allowed renewed access; it later found additional unauthorized changes and repository tampering.
- OpenSourceMalware assessed with high confidence that attackers accessed the Argon-DevOps-Mgt service account, which had access to Aqua’s public and private GitHub organizations.
- Researchers believe the attackers obtained the account’s Personal Access Token through the TeamPCP Cloud stealer, which collects credentials and tokens from CI runners.
- Aqua rotated secrets, released safe Trivy versions, and engaged Sygnia for remediation and forensic investigation.
- Aqua said it had no evidence that the Trivy version used in its commercial products was affected; it also cautioned that Trivy was not impacted at that time.
Article Details
- Victim Organization
- Aqua Security
- Incident Type
- Supply-chain attack involving unauthorized access to Aqua Security’s GitHub organization, repository tampering, and publication of malicious Trivy Docker images containing an infostealer.
- Data Types Exposed
- GitHub tokens
- SSH keys
- Cloud credentials
- Environment variables
- Operational Impact
- Attackers tampered with repositories and published unauthorized Docker Hub tags and malicious Trivy images. Aqua Security rotated secrets, released safe Trivy versions, engaged Sygnia for incident response, and reported finding additional repository tampering. The article does not confirm that credentials or other data were successfully stolen.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed
Threat Actors
Malware
Vendors
Aqua SecurityThe TeamPCP hackers continued to target Aqua Security by compromising its GitHub organization and pushing malicious Trivy Docker images that delivered an infostealer.Sygniawith repositories, and publish unauthorized Docker Hub tags, prompting Aqua to rotate secrets and engage Sygnia for response.
Products
Docker Hubrunner tokens to inject credential-harvesting code, tamper with repositories, and publish unauthorized Docker Hub tags, prompting Aqua to rotate secrets and engage Sygnia for response.GitHubThe TeamPCP hackers continued to target Aqua Security by compromising its GitHub organization and pushing malicious Trivy Docker images that delivered an infostealer.TrivyThe TeamPCP hackers continued to target Aqua Security by compromising its GitHub organization and pushing malicious Trivy Docker images that delivered an infostealer.