Official CheckMarx Jenkins package compromised with infostealer

PyPI package with 1.1M monthly downloads hacked to push infostealer

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop