Cybersecurity articles tagged #Checkmarx on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/malicious-jetbrains-plugins-steal-ai-api-keys-supply-chain-riskshttps://runtimerebel.com/blog/malicious-jetbrains-plugins-steal-ai-api-keys-supply-chain-risksResearchers discovered 15 malicious plugins on the JetBrains Marketplace designed to exfiltrate sensitive AI API keys from developers' IDE environments.Wed, 17 Jun 2026 01:06:50 GMTJetBrainsAPI TheftAI SecurityCheckmarxIDE Securityhttps://runtimerebel.com/blog/checkmarx-jenkins-ast-plugin-compromised-in-teampcp-attackhttps://runtimerebel.com/blog/checkmarx-jenkins-ast-plugin-compromised-in-teampcp-attackTeamPCP compromised the Checkmarx Jenkins AST plugin on the Jenkins Marketplace. Defenders must revert to version 2.0.13 to secure CI/CD pipelines.Mon, 11 May 2026 20:39:30 GMTCheckmarxJenkinsTeamPCPSupply Chain AttackCI CD Securityhttps://runtimerebel.com/blog/checkmarx-supply-chain-attack-github-data-exfiltration-confirmedhttps://runtimerebel.com/blog/checkmarx-supply-chain-attack-github-data-exfiltration-confirmedCheckmarx confirms data exfiltration from its GitHub environment following a malicious code publication. Learn about the TTPs and mitigation strategies.Wed, 29 Apr 2026 12:42:21 GMTCheckmarxGitHubSupply Chain AttackData BreachMalicious Packageshttps://runtimerebel.com/blog/checkmarx-data-leak-lapsus-group-targets-github-repositorieshttps://runtimerebel.com/blog/checkmarx-data-leak-lapsus-group-targets-github-repositoriesLAPSUS$ threat actors leaked source code stolen from Checkmarx's private GitHub repositories. Analyze the impact of this supply chain security incident.Tue, 28 Apr 2026 16:42:35 GMTLapsus GroupCheckmarxGithub LeakSource Code TheftExtortionhttps://runtimerebel.com/blog/glassworm-malware-cloned-open-vsx-extensions-target-developershttps://runtimerebel.com/blog/glassworm-malware-cloned-open-vsx-extensions-target-developersOver 70 malicious Open VSX extensions cloned from popular tools deliver GlassWorm malware, highlighting risks in developer-focused supply chain attacks.Tue, 28 Apr 2026 12:45:16 GMTOpen VSXGlassWormVS CodeCheckmarxMalwareSupply Chain Attackhttps://runtimerebel.com/blog/checkmarx-github-repository-data-leaked-following-supply-chain-attackhttps://runtimerebel.com/blog/checkmarx-github-repository-data-leaked-following-supply-chain-attackCheckmarx confirms internal GitHub repository data was published on the dark web following a March 2026 supply chain incident. Learn the impact and TTPs.Mon, 27 Apr 2026 16:37:34 GMTCheckmarxGitHubSupply Chain AttackData LeakDevSecOpshttps://runtimerebel.com/blog/compromised-checkmarx-kics-supply-chain-attack-on-developer-environmentshttps://runtimerebel.com/blog/compromised-checkmarx-kics-supply-chain-attack-on-developer-environmentsA supply chain attack compromised Checkmarx KICS Docker images and extensions, exposing developer environments to sensitive data theft. Learn mitigation.Thu, 23 Apr 2026 16:40:50 GMTCheckmarxKICSSupply Chain AttackDeveloper ToolsVS CodeDockerData Thefthttps://runtimerebel.com/blog/checkmarx-kics-docker-repository-and-vs-code-extension-hijackedhttps://runtimerebel.com/blog/checkmarx-kics-docker-repository-and-vs-code-extension-hijackedUnknown threat actors hijacked the checkmarx/kics Docker Hub repository, overwriting official image tags to distribute malicious code via supply chain.Wed, 22 Apr 2026 20:24:25 GMTCheckmarxKICSDocker Hub SecuritySupply Chain AttackSocket Securityhttps://runtimerebel.com/blog/teampcp-supply-chain-checkmarx-wider-scope-litellm-pypi-compromisehttps://runtimerebel.com/blog/teampcp-supply-chain-checkmarx-wider-scope-litellm-pypi-compromiseAn update on the TeamPCP supply chain campaign details wider Checkmarx impact, LiteLLM PyPI compromise, and a CISA KEV entry.Thu, 26 Mar 2026 20:16:14 GMTTeamPCPSupply Chain AttackCheckmarxLiteLLMPyPICISA KEV