The Trivy supply chain attack started 16 months earlier than you think · HackerTrans