Codex Security, formerly Aardvark⁠, has found hundreds of critical vulnerabilities in tested software in the past month.

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...