Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Checkmarx Malicious Package Protection | 0-Doubt

Home
Vendors
Checkmarx
Checkmarx Malicious Package Protection

Home
Vendors
Software Supply Chain Security
Checkmarx Malicious Package Protection

Checkmarx Malicious Package Protection

Supply chainAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 6 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~114 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Identify and block malicious dependencies.

by Checkmarx · checkmarx.com · source ↗

Screenshots

1

Checkmarx Malicious Package Protection — screenshot

Known CVEs (6)

CVE-2026-42994 ↗CRITICAL 9.82026
Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.
CVE-2023-35142 ↗HIGH 8.12023
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.
CVE-2022-46684 ↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Software Supply Chain Security products

Chainguard Libraries · Chainguard
Chainguard OS Packages · Chainguard
Chainguard VMs · Chainguard
Chainguard Zero-CVE Images · Chainguard
Cloudsmith · Cloudsmith
Codenotary Trustcenter · Codenotary
Cycode CI/CD Security · Cycode
DigiCert Software Trust Manager · DigiCert

MEDIUM 5.4

2022

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) v…

…and 3 more · see all on the vendor page →