Aqua Security

Reported Context (10)

supply chain attack seeded by a single unrevoked credential retained from an incomplete rotation at Aqua Security. Using the aqua-bot service account’s PAT, they force-pushed malicious commits to 76 version tags Supply-Chain Malware Campaigns Target Developers and CI Systems in 2026
In March 2026, TeamPCP compromised Aqua Security’s popular open-source Trivy vulnerability scanner, which then led to several downstream attacks (and later spreading to the npm ecosystem with a worm that used stolen Attackers Compromised axios npm Releases to Deliver Cross-Platform Malware
versions 1.82.7 and 1.82.8 were published using stolen CI/CD publishing credentials from Trivy (Aqua Security's vulnerability scanner). The attack targeted LiteLLM, a widely-used LLM proxy with ~3.4 million daily Vercel Breach Traced to Stolen OAuth Tokens, Exposing Environment Variables in Compromised Teams
Case Study III — Aqua Security / Trivy (March 2026): The Blockchain-Backed, Multi-Stage Infostealer Supply-Chain Attacks Turn Security and DevSecOps Tools into Credential-Theft Paths
March 19 - Trivy: Credential-stealing malware injected into Aqua Security's vulnerability scanner through the binary, GitHub Actions and container images. Wiz Details TeamPCP’s Post-Compromise Activity After Supply Chain Attacks

CVE (7)

Malware (11)

People (18)

Threat Actors (9)

MITRE ATT&CK (58)

Vendors (25)

Products (58)

Tools (17)

Industries (16)

Countries (17)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.