UNVERIFIEDSingle SourceWidely used Trivy scanner compromised in ongoing supply-chain attackArs Technica|3/20/2026
UNVERIFIEDSingle SourceSupply-chain attack using invisible code hits GitHub and other repositoriesArs Technica|3/13/2026
UNVERIFIEDSingle SourceNotepad++ users take note: It's time to check if you're hackedArs Technica|2/2/2026