Toxic Flows

Checkmarx uncovers TeamPCP sabotage of Jenkins plugin

Security researchers at Checkmarx have identified a new supply chain attack targeting the Jenkins CI/CD platform. Threat actors known as TeamPCP are exploiting a vulnerability in a Jenkins plugin to compromise developer…