Mentioned by both

Trivy (aquasecurity) (84 points, 3 days ago, 30 comments) https://news.ycombinator.com/item?id=47450142

Wiz (3 points) https://www.wiz.io/blog/trivy-compromised-teampcp-supply-cha...