3 ms·
title is bit misleading. The package was directly compromised, not “by supply chain attack”. If you use the compromised package, your supply chain is compromi
by 6thbit 7mo ago
title is bit misleading.
The package was directly compromised, not “by supply chain attack”.
If you use the compromised package, your supply chain is compromised.
- dlor 7mo agoIt's both. They got compromised by another supply chain attack on Trivy initially.