UNVERIFIEDSingle SourceWidely used Trivy scanner compromised in ongoing supply-chain attackArs Technica|3/20/2026