GCVE-110-OSM-2026-1051

Threat actors compromised the GitHub build process for https://github.com/aquasecurity/trivy/ and pushed a malicious update which installs an infostealer malware. Malicious tag included a link to a binary payload which we have not analyzed yet. Treat as CRITICAL until we know more. The threat actors created a lookalike domain: scan.aquasecurtiy.org. The build process pulled 4 malicious Golang files from this attacker-controlled domain. The malware is described by the threat actor as "TeamPCP Cloud stealer". The malware attempts to pull a secondary payload from can.aquasecurtiy.org and if that fails it polls https://tdtqy-oyaaa-aaaae-af2dq-cai.raw.icp0.io for additional payloads. Credential Harvesting: The malware operated across two vectors — compromised GitHub Actions (trivy-action, setup-trivy) and a trojanized Trivy binary (v0.69.4). In CI/CD environments, it scraped Runner.Worker process memory via /proc/<pid>/mem looking for secrets, and swept the filesystem for SSH keys, cloud credentials (AWS, GCP, Azure), Kubernetes tokens, and cryptocurrency wallets across 50+ sensitive file paths. The trojanized binary performed similar theft on developer machines, also collecting environment variables and enumerating network interfaces. Exfiltration: Harvested credentials were encrypted using AES-256-CBC with RSA-4096 hybrid encryption, bundled into a tpcp.tar.gz archive, and transmitted to a typosquatted C2 domain (scan.aquasecurtiy[.]org). As a fallback, the GitHub Actions variant uploaded stolen data to a repo named tpcp-docs within the victim's own GitHub account — an unusual exfil technique that abused the runner's existing credentials. Persistence: When the trojanized binary detected it was running outside GitHub Actions (i.e., on a developer workstation), it dropped a Python script at ~/.config/systemd/user/sysmon.py and registered a systemd user unit for continuous execution. This dropper polled the C2 server for secondary payloads, establishing a persistent foothold beyond the initial credential theft.