// stack
Docker
Security incidents affecting container images and registries. Newest first.
- incidents
- 2
- live
- 1
- patched
- 2
## 2 Docker incidents in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
March 2026 1
criticalTeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actionspatched
› Aqua Trivy, trivy-action, setup-trivy, Checkmarx AST/KICS GitHub Actions, related Docker/VS Code artifacts patched
Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.
