Post · bonfire.cafe

Catalin Cimpanu

@campuscodi@mastodon.social · 2 hours ago

Checkmarx hack update:

"We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace"

https://checkmarx.com/blog/ongoing-security-updates/

Checkmarx

Update: Ongoing Checkmarx Supply Chain Security Incident

Incident Update: Saturday, May 9, 2026 We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace. We are in the process of publishing a new version of this plug-in. If you are using Checkmarx Jenkins AST Plugin, you need to ensure that you are using the […]

Dan Cornell

@danielcornell@mastodon.social · 1 hour ago

@campuscodi Everyone should definitely make sure they're running version "2.0.13-829.vc72453fa_1c16" and not some other, nefarious-looking version number