securityBACKGROUND
Official CheckMarx Jenkins package compromised with infostealer
BACKGROUND
1 SIGNALFIRST DETECTED 11 May 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
11 May
Official CheckMarx Jenkins package compromised with infostealer
REPORT · WHAT · BleepingComputer
8.9
Other feeds and industry voices
11 May
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. "If you are using Checkmarx Jenkins AST plugin, you need to
REPORT · WHO · The Hacker NewsOPEN STORY
23 Apr
New Checkmarx supply-chain breach affects KICS analysis tool
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environments. [...]
REPORT · WHAT · BleepingComputerOPEN STORY
Sources
BleepingComputer
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →