Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
An AI-assisted campaign is spreading more than 300 poisoned packages for diverse assets ranging from developer tools to game ...