credential-theft

2 pieces of writing

Trivy turned a security scanner into a credential stealer

The Trivy compromise showed why CI/CD security tools are high-value supply chain targets: they run where secrets, tokens and publishing credentials already live.

21 July 2026

security13 min read

PCPJack, polyfill CDN and Bright Data SDK show supply chain attacks moving into runtime weaponisation

11 June 2026