TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace If you are using Checkmarx Jenkins AST plugin you need to ensure that you are using the version 2013829vc72453fa1c16 that was published on December 17 2025 or previously the cybersecurity company said in a statement over the weekend As of writing Checkmarx has released