TeamPCP moves from Trivy to the KICS GitHub Action, LiteLLM and telnyx, Wiz and JFrog report, as CISA lists the Trivy compromise
Wiz ties KICS GitHub Action and LiteLLM compromises to TeamPCP, which Wiz says self-identified in the Trivy attack; JFrog links two telnyx releases to it. CISA listed the Trivy CVE in KEV on 26 March.