A malicious version of the plugin was published to the Jenkins Marketplace late last week. The post Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek .
Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack
Summary + source link. No paywalls, no tracking.