Official CheckMarx Jenkins package compromised with infostealer

BleepingComputerMay 11, 2026
checkmarxjenkinsinfostealerpluginsecurity

Checkmarx has issued a warning regarding a compromised version of its Jenkins Application Security Testing (AST) plugin that was found on the Jenkins Marketplace. This rogue plugin is designed to steal information, raising significant security concerns for users relying on Jenkins for application security. The incident highlights the ongoing risks associated with third-party software integrations in development environments.

Read original source
← Back to Cybersecurity