Security firm Checkmarx has been targeted twice in the past year, with a recent supply-chain attack on Trivy. The attackers used their access to push malware to customers, including one of the security firm's users. Four days later, the company's GitHub account was compromised and the attackers began pushing malware. Despite efforts to remove them from the account, this new attack appears to have occurred.