Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

Trivy, an open-source vulnerability scanner by Aqua Security, suffered a second supply chain attack where 75 GitHub Actions version tags were hijacked to deliver CI/CD secret-stealing malware.

• •Attacker force-pushed 75 of 76 version tags in aquasecurity/trivy-action and setup-trivy to point to malicious commits containing a Python infostealer payload.
• •The stealer harvests environment variables, SSH keys, cloud credentials, Kubernetes tokens, Docker configs, and cryptocurrency wallet keys from GitHub Actions runners.
• •Exfiltration is done via HTTP POST to scan.aquasecurtiy[.]org; if blocked, stolen data is staged in a public GitHub repo named 'tpcp-docs' using the victim's own PAT.
• •Root cause was incomplete credential rotation from a prior incident (hackerbot-claw), allowing attackers to reuse compromised tokens.