Trellix Reveals Unauthorized Access to Source Code

**Executive summary:** Trellix disclosed that threat actors gained unauthorized access to part of its source code repository; the company reports no evidence to date that code distribution or update processes were compromised or that the stolen code has been exploited, and investigators are working with law enforcement and forensics teams. The article contextualizes this breach alongside recent Trivy-related supply-chain compromises and mentions potential links between groups such as TeamPCP, Lapsus$, and Vect, underscoring supply-chain and detection-risk implications for security vendors.