CERT-EU is blaming TeamPCP for the attack, saying the Trivy breach trickled down.