TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

Posted 3 hours ago by

The Hacker News

Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. If you are using Checkmarx Jenkins AST plugin, you need to ensure that you are using the version 2.0.13-829.vc72453fa_1c16 that was published on December 17, 2025 or previously, the cybersecurity company said in a statement over the weekend.