--- title: "TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions" url: https://daily.dev/posts/teampcp-expands-supply-chain-compromise-spreads-from-trivy-to-checkmarx-github-actions-ktg5fcfjs source_url: https://webflow.sysdig.com/blog/teampcp-expands-supply-chain-compromise-spreads-from-trivy-to-checkmarx-github-actions type: article source: "Sysdig Blog" published: 2026-05-31T07:44:03.333Z updated: 2026-05-31T08:08:29.384Z tags: ["security", "cicd", "github-actions"] reading_time: 7 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions **[Sysdig Blog](https://daily.dev/sources/sysdig-blog)** · 7 min read · 0 upvotes · 0 comments ## Summary The threat actor TeamPCP, after compromising Aqua Security's Trivy GitHub Action on March 19, 2026, used stolen CI/CD credentials to poison a second unrelated GitHub Action — Checkmarx's ast-github-action v2.3.28 — approximately four days later. The attack follows an identical kill chain: scraping secrets from Runner.Worker process memory, harvesting AWS IMDS credentials, enumerating Slack/Discord webhooks, and exfiltrating an AES-256+RSA-4096 encrypted archive to vendor-specific typosquat domains. The cascading nature of the attack — one poisoned action harvesting tokens that enable poisoning of additional actions — highlights the fragility of tag-based action references. Runtime detection via Falco and Sysdig Secure proved effective because the underlying syscall behavior is identical regardless of which action delivers the payload. Recommendations include pinning actions to commit SHAs, rotating all exposed credentials, restricting IMDS access, and enabling runtime monitoring on CI runner infrastructure. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers](https://daily.dev/posts/how-teampcp-turned-aqua-security-s-own-trivy-scanner-into-a-weapon-against-millions-of-developers-eeezo06er) · The New Stack · 0 upvotes · 0 comments - [Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM](https://daily.dev/posts/sophisticated-supply-chain-attack-targeting-trivy-expands-to-checkmarx-litellm-setw9szuc) · DevOps.com · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/teampcp-expands-supply-chain-compromise-spreads-from-trivy-to-checkmarx-github-actions-ktg5fcfjs)