Person
Itay Shakury
- First Reported
- Mar 11, 2026
- Latest Reported
- Mar 20, 2026
Reported Context (2)
- Aqua Security's vice president of open source; described the compromised credential and Aqua Security's response. Trivy GitHub Actions Tags Hijacked to Deliver Infostealer Targeting CI/CD Secrets
- Aqua Security representative who disclosed that the attacker used a GitHub Actions workflow to publish a malicious Trivy VS Code extension. Five Malicious Rust Crates and AI Bot Target CI/CD Secrets
CVE (1)
People (4)
Threat Actors (4)
MITRE ATT&CK (8)
Vendors (2)
Products (10)
Tools (1)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.