Socket on Mythryl: “We published technical analysis of the Checkmarx compromise…”

We published technical analysis of the Checkmarx compromise, including how malicious extensions silently fetched a second-stage payload from Checkmarx’s own GitHub repo. Our analysis also shows the malware stole developer credentials and used them for exfiltration and propagation.

Socket@socket.dev

🚨 BREAKING: Socket and @docker.com uncovered what appears to be a broader Checkmarx supply chain compromise affecting official KICS Docker images and recent Checkmarx VS Code extension releases. More details: socket.dev/blog/checkma...

socket.devMalicious Checkmarx Artifacts Found in Official KICS Docker ...Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

22/4/26, 8:42 pm2 reposts1 like

Post