step-security · Crawled Jul 5, 2026
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
2 IoCs 1 Actors 1 CVEs
Read original article ↗
AI Summary
In March 2026, the threat actor TeamPCP compromised 76 version tags of the aquasecurity/trivy-action GitHub Action by injecting a credential stealer, exploiting elevated privileges to harvest secrets from memory and exfiltrate them to a malicious domain. The same actor targeted other platforms including PyPI packages litellm and telnyx, and previously compromised the Checkmarx KICS GitHub Action using similar tactics. These supply chain attacks highlight a broader trend of targeting CI/CD pipelines to steal credentials and cloud tokens. The attacks leveraged typosquatted domains and memory scraping techniques, underscoring the need for layered defenses in GitHub Actions environments.
AI-extracted · verify before operational use
Extracted Entities 2 found
Indicators of Compromise 2 extracted
MITRE ATT&CK TTPs 20 techniques
T1005 Data from Local System · Collection T1036.005 Match Legitimate Name or Location · Defense Evasion T1055 Process Injection · Defense Evasion T1059.001 PowerShell · Execution T1070.004 File Deletion · Defense Evasion T1071 Application Layer Protocol · Command And Control T1071.001 Web Protocols · Command And Control T1078 Valid Accounts · Defense Evasion T1081 T1081 T1090 Proxy · Command And Control T1098 Account Manipulation · Persistence T1133 External Remote Services · Persistence T1195.001 Compromise Software Dependencies and Development Tools · Initial Access T1548.001 Setuid and Setgid · Privilege Escalation T1553 Subvert Trust Controls · Defense Evasion T1566 Phishing · Initial Access T1027 Obfuscated Files or Information · Defense Evasion T1059.003 Windows Command Shell · Execution T1195.002 Compromise Software Supply Chain · Initial Access T1555 Credentials from Password Stores · Credential Access