Cybersecurity

Checkmarx Jenkins Plugin Backdoored in New TeamPCP Supply Chain Attack

24 sec read243 views0 listens

TeamPCP compromised the Checkmarx Jenkins plugin, defacing its GitHub repository and backdooring a release with malware. This attack highlights ongoing supply chain risks and underscores the need for developers to rigorously audit and secure their CI/CD pipelines. Developers should immediately check for the affected version (2026.5.09) and rotate any compromised secrets.

Read the full article at SOCRadar-? Cyber Intelligence Inc.

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

243

400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers

A wide-scale supply chain attack dubbed Atomic Arch compromised over four hundred Arch User Repository packages by injecting malicious build scripts that deploy credential-stealing malware. Tech professionals using community repositories must immedia...

Ali Nemati

CybersecurityJun 1029 sec read

Hackers Infect npm Package dbmux With Malware to Fully Compromise Developer Systems

A malicious npm package named dbmux has been discovered containing hidden malware that allows attackers to fully compromise developer systems upon installation. This critical supply chain threat bypasses traditional security controls, putting sensiti...

Ali Nemati

CybersecurityJun 534 sec read

EU Council to examine cybersecurity package focused on ENISA, NIS2 simplification, and supply chain security

The EU Council is set to review a comprehensive cybersecurity package aimed at bolstering the bloc's digital resilience and strategic autonomy. Key elements include strengthening the role of ENISA, simplifying NIS2 Directive provisions, and establish...

Ali Nemati

CybersecurityJun 429 sec read

IronWorm Supply Chain Attack Uses Malicious npm Packages to Steal Developer Secrets

The 'IronWorm' supply chain attack utilizes malicious npm packages to steal developer secrets, including credentials, API keys, and cryptocurrency wallet phrases, then uses these secrets to inject further malware into repositories. Developers must be...

Ali Nemati

AI & Machine LearningApr 1459 sec read

axios npm Supply Chain Attack (March 31, 2026) - What Happened and How to Check Your Lock File Right Now

The article you've shared is a detailed and comprehensive analysis of the hypothetical "Axios npm Supply Chain Attack" that occurred in March 2026. It provides an in-depth look at how such an attack unfolds, its impact on developers and organizations...

Ali Nemati

Checkmarx Jenkins Plugin Backdoored in New TeamPCP Supply Chain Attack

Related Articles

400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers

Hackers Infect npm Package dbmux With Malware to Fully Compromise Developer Systems

EU Council to examine cybersecurity package focused on ENISA, NIS2 simplification, and supply chain security

IronWorm Supply Chain Attack Uses Malicious npm Packages to Steal Developer Secrets

axios npm Supply Chain Attack (March 31, 2026) - What Happened and How to Check Your Lock File Right Now