Sometime on March 19, 2026, a poisoned version of the open-source security scanner Trivy slipped into automated build ...