Security Tools Turned Against Their Users

TeamPCP compromised three widely used security scanning tools—Trivy, Checkmarx, and Bitwarden—starting March 19, injecting malware into the automated build pipelines organizations rely on to catch threats. The attack inverted the defender's advantage: the very systems meant to detect breaches became vectors for intrusion. Attackers retained access for weeks after discovery. The malware included a data wiper targeting Iranian infrastructure.