Tracked topic
… The Checkmarx AST plugin on the Jenkins Marketplace integrates security scanning into automated pipelines. “We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace. …
We caught a malicious image pushed to checkmarx/kics on Docker Hub, the image was quarantined, and we coordinated response with Socket and Checkmarx. …
… Checkmarx und Bitwarden: Die Paketkette bleibt ein lohnendes Ziel Checkmarx bestätigte am 27. …
… Download Now Related Articles: Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers advertise Mistral AI code repos for sale Bitwarden CLI npm package compromised to steal developer credentials Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data GitHub investigat… …
… In March, the hacker group also compromised Aqua Security's Trivy vulnerability scanner , which is believed to have led to cascading compromises affecting Aqua Security Docker images and the Checkmarx KICS project . …
… Download Now Related Articles: Video service Vimeo confirms Anodot breach exposed user data Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data US govt seeks Instructure testimony on massive Canvas cyberattack Instructure reaches 'agreement' with ShinyHunters to stop data leak NVIDIA c… …
… Later in March, the same crew injected the same malware into open source static analysis tool KICS maintained by Checkmarx, and also published malicious versions of LiteLLM and Telnyx to the Python Package Index PyPI . …
… More recent supply-chain attacks have hit Trivy, Checkmarx, and Bitwarden and more than 150 packages available through open source repositories. …
… The Cisco breach is just the most recent in a string of supply chain attacks that TeamPCP has carried out to spread its infostealer malware, including via the LiteLLM AI software and the security software CheckMarx.
… Then, on March 23, the same crew used CI/CD secrets stolen from the Trivy intrusion to inject the same malware into open source static analysis tool KICS, maintained by Checkmarx. …
