Sunday 26 July 2026 12:15:30 GMT+02:00
Netcrook
#Jenkins Marketplace
When a Trusted Jenkins Plugin Turns into a Malware Dropper
A rogue Checkmarx-related plugin release on the Jenkins Marketplace shows how quickly CI/CD trust can become an attack surface.
When a Trusted Plugin Turns Suspicious: Jenkins’ Update Path Under the Microscope
Checkmarx confirmed a modified version of its Jenkins AST plugin was published through the Jenkins distribution path, a reminder that software trust chains are as valuable to attackers as the code they deliver.