All Related Articles for: CheckMarx Jenkins package compromised by infostealer
-
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Trellix Confirms Source Code Breach
Trellix, a major US cybersecurity firm formed from the…
Read More » -
Hackers Exploit Critical LiteLLM Pre-Auth SQLi Flaw
Hackers are actively exploiting a critical pre-authentication SQL injection…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
Open source package with 1M monthly downloads stole user credentials
Attackers exploited a vulnerability in a GitHub action workflow…
Read More » -
Open-Source Tool Reveals CI/CD Pipeline Attack Methods
Boost Security has launched SmokedMeat, an open-source framework that…
Read More » -
Axios npm Hack, FortiClient EMS Bugs Exploited
The financial sector warns that generative AI has made…
Read More » -
Hackers Breach EU Commission Via Security Tool Trivy
A major data breach at the European Commission was…
Read More » -
Software Supply Chain Attacks Cause Data Breaches
A series of software supply chain attacks on popular…
Read More » -
TeamPCP Ransomware Shift Raises Threat Despite Slower Attacks
TeamPCP has not retreated but has strategically paused its…
Read More » -
Malware hidden in backdoored Telnyx PyPI package
A malicious version of the Telnyx SDK Python package…
Read More » -
CISA Warns of Active Langflow RCE, Trivy Supply Chain Attacks
The U.S. CISA has mandated federal agencies to patch…
Read More » -
LiteLLM PyPI packages hijacked in TeamPCP supply chain attacks
A coordinated software supply chain attack by the group…
Read More » -
Trivy Supply Chain Attack Spreads via Compromised Docker Images
The Trivy supply chain attack has escalated with newly…
Read More » -
Iran-Targeting Malware Infects Open Source Software
A new hacking group, TeamPCP, is conducting a sophisticated…
Read More » -
Trivy Scanner Compromised in Major Supply-Chain Attack
A supply-chain attack compromised nearly all versions of the…
Read More » -
PhantomRaven NPM Attack Steals Dev Data in 88 Packages
The PhantomRaven campaign targets the npm registry using malicious…
Read More » -
New npm Malware Spreads Itself in Supply Chain Attack
A sophisticated malware campaign is targeting developers via 19…
Read More »
