PULSE NAME
Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack
WHITE Teampcp PetrP.73 2026-03-24 Modified: 2026-04-23
97
IOCs
HIGH VOLUME
On March 19, 2026, a sophisticated supply chain attack was conducted against Aqua Security's Trivy vulnerability scanner, resulting in the injection of credential-stealing malware across several components of the Trivy project, including the core scanner and its GitHub Actions. The threat actor, identified as TeamPCP, executed the attack by making fraudulent commits and pushing malicious versions of the Trivy repository, specifically tagging v0.69.4. This led to the distribution of compromised binaries and scripts through GitHub Releases, Docker Hub, and other channels.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (83 / 97 total)
All hostname FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 d820fc3440e7eadc575315f9a96a34ae450ec457 SHA1 of 822dd269ec10459572dfaaefe163dae693c344249a0161953f0d5cdd110bd2a0 2026-03-24
FileHash-SHA1 0891663bc55073747be0eb864fbec3727840945d 2026-03-24
FileHash-SHA1 0d49ceb356f7d4735c63bd0d5c7e67665ec7f80c 2026-03-24
FileHash-SHA1 18f01febc4c3cd70ce6b94b70e69ab866fc033f5 2026-03-24
FileHash-SHA1 19851bef764b57ff95b35e66589f31949eeb229d 2026-03-24
FileHash-SHA1 1d74e4cf63b7cf083cf92bf5923cf037f7011c6b 2026-03-24
FileHash-SHA1 2297a1b967ecc05ba2285eb6af56ab4da554ecae 2026-03-24
FileHash-SHA1 22e864e71155122e2834eb0c10d0e7e0b8f65aa3 2026-03-24
FileHash-SHA1 252554b0e1130467f4301ba65c55a9c373508e35 2026-03-24
FileHash-SHA1 276ca9680f6df9016db12f7c48571e5c4639451d 2026-03-24
FileHash-SHA1 2a51c5c5bb1fd1f0e134c9754f1702cfa359c3dd 2026-03-24
FileHash-SHA1 2b1dac84ff12ba56158b3a97e2941a587cb20da9 2026-03-24
FileHash-SHA1 2e7964d59cd24d1fd2aa4d6a5f93b7f09ea96947 2026-03-24
FileHash-SHA1 3201ddddd69a1419c6f1511a14c5945ba3217126 2026-03-24
FileHash-SHA1 384add36b52014a0f99c0ab3a3d58bd47e53d00f 2026-03-24
FileHash-SHA1 38623bf26706d51c45647909dcfb669825442804 2026-03-24
FileHash-SHA1 386c0f18ac3d7f2ed33e2d884761119f4024ff8a 2026-03-24
FileHash-SHA1 3c615ac0f29e743eda8863377f9776619fd2db76 2026-03-24
FileHash-SHA1 3d1b5be1589a83fc98b82781c263708b2eb3b47b 2026-03-24
FileHash-SHA1 3dffed04dc90cf1c548f40577d642c52241ec76c 2026-03-24
FileHash-SHA1 405e91f329294fb696f55793203abf1f6aba9b40 2026-03-24
FileHash-SHA1 4209dcadeaea6a7df69262fef1beeda940881d4d 2026-03-24
FileHash-SHA1 4bdcc5d9ef3ddb42ccc9126e6c07faa3df2807e3 2026-03-24
FileHash-SHA1 506d7ff06abc509692c600b5b69b4dc6ceaa4b15 2026-03-24
FileHash-SHA1 555e7ad4c895c558c7214496df1cd56d1390c516 2026-03-24
FileHash-SHA1 61fbe20b7589e6b61eedcd5fe1e958e1a95fbd13 2026-03-24
FileHash-SHA1 66c90331c8b991e7895d37796ac712b5895dda3b 2026-03-24
FileHash-SHA1 6d8d730153d6151e03549f276faca0275ed9c7b2 2026-03-24
FileHash-SHA1 6ec7aaf336b7d2593d980908be9bc4fed6d407c6 2026-03-24
FileHash-SHA1 6fc874a1f9d65052d4c67a314da1dae914f1daff 2026-03-24
FileHash-SHA1 7550f14b64c1c724035a075b36e71423719a1f30 2026-03-24
FileHash-SHA1 794b6d99daefd5e27ecb33e12691c4026739bf98 2026-03-24
FileHash-SHA1 7a4b6f31edb8db48cc22a1d41e298b38c4a6417e 2026-03-24
FileHash-SHA1 7b955a5ece1e1b085c12dac7ac10e0eb1f5b0d4d 2026-03-24
FileHash-SHA1 7f6f0ce52a59bdfc5757c3982aac2353b58f4c73 2026-03-24
FileHash-SHA1 820428afeb64484d311211658383ce7f79d31a0a 2026-03-24
FileHash-SHA1 848d665ed24dc1a41f6b4b7c7ffac7693d6b37be 2026-03-24
FileHash-SHA1 8519037888b189f13047371758f7aed2283c6b58 2026-03-24
FileHash-SHA1 85cb72f1e8ee5e6e44488cd6cbdbca94722f96ed 2026-03-24
FileHash-SHA1 8aa8af3ea1de8e968a3e49a40afb063692ab8eae 2026-03-24
FileHash-SHA1 8ae5a08aec3013ee8f6132b2a9012b45002f8eaa 2026-03-24
FileHash-SHA1 8afa9b9f9183b4e00c46e2b82d34047e3c177bd0 2026-03-24
FileHash-SHA1 8cfb9c31cc944da57458555aa398bb99336d5a1f 2026-03-24
FileHash-SHA1 9092287c0339a8102f91c5a257a7e27625d9d029 2026-03-24
FileHash-SHA1 91d5e0a13afab54533a95f8019dd7530bd38a071 2026-03-24
FileHash-SHA1 91e7c2c36dcad14149d8e455b960af62a2ffb275 2026-03-24
FileHash-SHA1 9738180dd24427b8824445dbbc23c30ffc1cb0d8 2026-03-24
FileHash-SHA1 985447b035c447c1ed45f38fad7ca7a4254cb668 2026-03-24
FileHash-SHA1 99b93c070aac11b52dfc3e41a55cbb24a331ae75 2026-03-24
FileHash-SHA1 9ba3c3cd3b23d033cd91253a9e61a4bf59c8a670 2026-03-24
FileHash-SHA1 9c000ba9d482773cbbc2c3544d61b109bc9eb832 2026-03-24
FileHash-SHA1 9e8968cb83234f0de0217aa8c934a68a317ee518 2026-03-24
FileHash-SHA1 a5b4818debf2adbaba872aaffd6a0f64a26449fa 2026-03-24
FileHash-SHA1 a9bc513ea7989e3234b395cafb8ed5ccc3755636 2026-03-24
FileHash-SHA1 aa3c46a9643b18125abb8aefc13219014e9c4be8 2026-03-24
FileHash-SHA1 ab6606b76e5a054be08cab3d07da323e90e751e8 2026-03-24
FileHash-SHA1 ad623e14ebdfe82b9627811d57b9a39e283d6128 2026-03-24
FileHash-SHA1 b7252377a3d82c73d497bfafa3eabe84de1d02c4 2026-03-24
FileHash-SHA1 b745a35bad072d93a9b83080e9920ec52c6b5a27 2026-03-24
FileHash-SHA1 b7befdc106c600585d3eec87d7e98e1c136839ae 2026-03-24
FileHash-SHA1 b9faa60f85f6f780a34b8d0faaf45b3e3966fdda 2026-03-24
FileHash-SHA1 bb75a9059c2d5803db49e6ed6c6f7e0b367f96be 2026-03-24
FileHash-SHA1 c19401b2f58dc6d2632cb473d44be98dd8292a93 2026-03-24
FileHash-SHA1 c5967f85626795f647d4bf6eb67227f9b79e02f5 2026-03-24
FileHash-SHA1 cf1692a1fc7a47120e6508309765db7e33477946 2026-03-24
FileHash-SHA1 cf19d27c8a7fb7a8bbf1e1000e9318749bcd82cf 2026-03-24
FileHash-SHA1 d488f4388ff4aa268906e25c2144f1433a4edec2 2026-03-24
FileHash-SHA1 da73ae0790e458e878b300b57ceb5f81ac573b46 2026-03-24
FileHash-SHA1 ddb6697447a97198bdef9bae00215059eb5e8bc2 2026-03-24
FileHash-SHA1 ddb94181dcbc723d96ffc07fddd14d97e4849016 2026-03-24
FileHash-SHA1 ddb9da4475c1cef7d5389062bdfdfbdbd1394648 2026-03-24
FileHash-SHA1 e0198fd2b6e1679e36d32933941182d9afa82f6f 2026-03-24
FileHash-SHA1 e53b0483d08da44da9dfe8a84bf2837e5163699b 2026-03-24
FileHash-SHA1 ea56cd31d82b853932d50f1144e95b21817e52cf 2026-03-24
FileHash-SHA1 ef3a510e3f94df3ea9fcd01621155ca5f2c3bf5b 2026-03-24
FileHash-SHA1 f4436225d8a5fd1715d3c2290d8a50643e726031 2026-03-24
FileHash-SHA1 f4f1785be270ae13f36f6a8cfbf6faaae50e660a 2026-03-24
FileHash-SHA1 f5c9fd927027beaa3760d2a84daa8b00e6e5ee21 2026-03-24
FileHash-SHA1 f77738448eec70113cf711656914b61905b3bd47 2026-03-24
FileHash-SHA1 fa4209b6182a4c1609ce34d40b67f5cfd7f00f53 2026-03-24
FileHash-SHA1 fa78e67c0df002c509bcdea88677fb5e2fe6a9b1 2026-03-24
FileHash-SHA1 fd090040b5f584f4fcbe466878cb204d0735dcf4 2026-03-24
FileHash-SHA1 fd429cf86db999572f3d9ca7c54561fdf7d388a4 2026-03-24