Recent and related:

Trivy ecosystem supply chain temporarily compromised - https://news.ycombinator.com/item?id=47450142 - March 2026 (35 comments)

temporarily might be a bit of an euphemism here