#Checkmarx
All CosmicBytez Labs articles tagged #Checkmarx, across news, security advisories, how-to guides, and projects.
- News
MALFEX npm Supply Chain Campaign Tops 40,000 Downloads After Three Years
Checkmarx traced MALFEX, a 3-year npm supply chain campaign spreading the Overlord RAT and Movinlike infostealer, to 8 packages with 40,767 downloads.
- News
Australian Police Charge Two Men Over TeamPCP Supply Chain Attacks
AFP charges two Western Australian men over TeamPCP's March 2026 compromise of Trivy, Checkmarx KICS, and LiteLLM in a global supply chain campaign.
- News
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks
Supply chain threat actor TeamPCP has struck again, publishing a tampered version of the Checkmarx Jenkins AST plugin to the Jenkins Marketplace — just...
- News
Checkmarx Confirms GitHub Repository Data Posted on Dark
Checkmarx has confirmed that data from its GitHub repositories has been published on the dark web following an investigation into the March 23 supply...
- News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain
The popular Bitwarden CLI password manager package @bitwarden/cli@2026.4.0 was compromised as part of an ongoing Checkmarx supply chain campaign, with...
- News
Malicious KICS Docker Images and VS Code Extensions Hit
Threat actors hijacked the official checkmarx/kics Docker Hub repository by overwriting existing image tags — including v2.1.20 and alpine variants — and...