KICS Supply Chain Attack — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 11, 2026
Last Seen
May 12, 2026

Related Threat Clusters

  • Checkmarx Jenkins Plugin Compromised by TeamPCP Malware Attack

    Checkmarx reported a malicious version of its Jenkins AST plugin was uploaded to the Jenkins Marketplace on May 9, 2026. This backdoored plugin, which affects security scans in Jenkins CI pipelines, poses a significant…

    15 articles · Updated May 11, 2026

Recent Intelligence Reports

  • TeamPCP Compromised Checkmarx Jenkins AST Plugin Following KICS Supply Chain Attack — Cybersecuritynews · May 12, 2026
  • TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack — Thehackernews · May 11, 2026

CVSS v3.1 Breakdown