The Trivy Supply Chain Attack and the Visibility Gap

47 npm packages. Thousands of downloads poisoned. And the tool at the center of it — Trivy — was built to find vulnerabilities, not spread…