Checkmarx Plugin Sabotaged in Fresh TeamPCP Intrusion

Checkmarx issued a warning on May 9, 2026, that a tampered version of its Jenkins AST plugin had been released on the Jenkins Marketplace, posing a risk to continuous-integration pipelines. The company quickly responded by urging customers to update to a trusted version, 2.0.13-829.vc72453fa_1c16, to safeguard their systems.

https://osintsights.com/checkmarx-plugin-sabotaged-in-fresh-teampcp-intrusion?utm_source=mastodon&utm_medium=social

#Jenkins #Checkmarx #SupplyChain #PluginVulnerability #EmergingThreats