CHECKMARX JENKINS PLUGIN COMPROMISED WITH INFOSTEALER

Checkmarx discovered a malicious version of its Jenkins Application Security Testing (AST) plugin published on the official Jenkins Marketplace. The rogue package contained infostealer malware designed to harvest sensitive data.