TeamPCP compromised the Checkmarx Jenkins plugin, defacing its GitHub repository and backdooring a release with malware. This attack highlights ongoing supply chain risks and underscores the need for developers to rigorously audit and secure their CI/CD pipelines. Developers should immediately check for the affected version (2026.5.09) and rotate any compromised secrets.
Read the full article at SOCRadar-? Cyber Intelligence Inc.
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

![[AINews] The Unreasonable Effectiveness of Closing the Loop](/_next/image?url=https%3A%2F%2Fmedia.nemati.ai%2Fmedia%2Fblog%2Fimages%2Farticles%2F600e22851bc7453b.webp&w=3840&q=75)



