Tracked topic
Official CheckMarx Jenkins package compromised with infostealer By Bill Toulas May 11, 2026 06:03 PM Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST…
We caught a malicious image pushed to checkmarx/kics on Docker Hub, the image was quarantined, and we coordinated response with Socket and Checkmarx. This blog walks through what happened and why…
…Then, on March 23, the same crew used CI/CD secrets stolen from the Trivy intrusion to inject the same malware into open source static analysis tool KICS, maintained by Checkmarx. Days…
…More recent supply-chain attacks have hit Trivy, Checkmarx, and Bitwarden and more than 150 packages available through open source repositories. Last year, there were at least six notable such attacks. Anyone…
…same crew injected the same malware into open source static analysis tool KICS maintained by Checkmarx, and also published malicious versions of LiteLLM and Telnyx to the Python Package Index (PyPI). After…
…just the most recent in a string of supply chain attacks that TeamPCP has carried out to spread its infostealer malware, including via the LiteLLM AI software and the security software CheckMarx.
…Security Bulletin ( Vercel ) Checkmarx Bestätigt die Supply-Chain-Vorfallsentwicklung, GitHub-Zugriffe, Datenexfiltration und Veröffentlichung von Daten durch LAPSUS$. Statement ( Checkmarx ) Bitwarden Bestätigt die kurzzeitige Verteilung eines bösartigen npm-Pakets für @bitwarden/ [email…
