Checkmarx security incident history
Hacking, data breaches and other security incidents involving Checkmarx, with related coverage.
Incidents: 1 · Most recent
Tampered Checkmarx developer tools distribute info-stealing malware
Impact: Data theft and distribution of malicious versions of developer tools
Checkmarx KICS Docker images and VS Code and Open VSX extensions were tampered with to distribute malware that collects secrets from development environments. The attack code was designed to steal cloud credentials, GitHub and npm tokens, SSH keys and more, and the company confirmed that data had been stolen. Malicious versions were later also distributed for the Jenkins AST plugin, and the company advised users to use safe versions and released a new plugin.
Related reports: 4 · last report →