41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0876a-1e6b-731e-993e-22a48169a6bb

They Got Trivy. They Got Axios. Now They’re Coming for the Linux Foundation.

dbtechreviews.com · published 16 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dbtechreviews.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 18
Words captured: 2,501

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.theregister.com/2026/04/11/trivy_axios_supply_chain_attacks/

theregister.com

https://www.theregister.com/2026/04/13/linux_foundation_social_engineering/

theregister.com

Update: Ongoing Investigation and Continued Remediation Read at the source ↗

https://www.crowdstrike.com/en-us/blog/from-scanner-to-stealer-inside-the-trivy-action-supply-chain-compromise/

crowdstrike.com

https://www.paloaltonetworks.com/blog/cloud-security/trivy-supply-chain-attack/

paloaltonetworks.com

https://www.microsoft.com/en-us/security/blog/2026/03/24/detecting-investigating-defending-against-trivy-supply-chain-compromise/

microsoft.com

https://www.legitsecurity.com/blog/the-trivy-supply-chain-compromise-what-happened-and-playbooks-to-respond

legitsecurity.com

https://thehackernews.com/2026/04/unc1069-social-engineering-of-axios.html

thehackernews.com

https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package

cloud.google.com

https://tech-insider.org/north-korea-axios-npm-supply-chain-attack-2026/

tech-insider.org

https://www.techzine.eu/news/security/140130/north-korea-behind-social-engineering-attack-on-axios-project/

techzine.eu

https://www.helpnetsecurity.com/2026/04/01/north-korean-hackers-linked-to-axios-npm-supply-chain-compromise/

helpnetsecurity.com

https://cybersecuritynews.com/axios-maintainer-confirms-the-npm-compromise/

cybersecuritynews.com

https://socket.dev/blog/attackers-impersonating-linux-foundation-leaders-in-slack-targeting-oss-developers

socket.dev

https://lists.openssf-vuln.org/g/siren/message/7

lists.openssf-vuln.org

https://www.helpnetsecurity.com/2026/04/08/social-engineering-open-source-developers/

helpnetsecurity.com

https://cybersecuritynews.com/hackers-impersonate-linux-foundation-leader/

cybersecuritynews.com

https://youtu.be/uNiTJgmg6Ck

youtu.be