TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions
› Aqua Trivy, trivy-action, setup-trivy, Checkmarx AST/KICS GitHub Actions, related Docker/VS Code artifacts
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Mar 1, 2026
- closed
- Mar 31, 2026
- CVEs
- none
- sources
- 4
## summary
Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.
severity: Critical supply-chain
## affected
- Trivy v0.69.4; trivy-action before v0.35.0; setup-trivy before v0.2.6; Checkmarx AST v2.3.28; KICS before v2.1.20 (per vendor/CSA guidance)
## fixed in
- trivy-action >= v0.35.0
- setup-trivy >= v0.2.6
- Checkmarx AST/KICS patched releases per Checkmarx updates
## timeline[2]
Trivy compromise disclosed; Microsoft guidance published.
Campaign expands to Checkmarx GitHub Actions (Sysdig / Checkmarx updates).
## advisories[1]
## news & write-ups[3]
## notes & caveats
Exact first-compromise date varies by report; March 2026 is the public disclosure window. Rotate all CI secrets if affected runners ran compromised actions.
