Widely used Trivy scanner compromised in ongoing supply-chain attack

The Trivy vulnerability scanner, trusted by over 10,000 organizations, is currently compromised in an ongoing supply-chain attack. Attackers injected malicious code into version 0.18.3, which has been downloaded 50,000 times since release. With a 40% adoption rate among Fortune 500 firms for container security, the compromise demands immediate remediation and a reevaluation of software supply chain trust.