TeamPCP supply chain attacks compromise Trivy and Checkmarx GitHub Actions

In March 2026, the threat actor TeamPCP executed a sophisticated supply chain attack compromising Aqua Security's Trivy vulnerability scanner and Checkmarx GitHub Actions workflows.