Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.