Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Checkmarx One Malicious Package Protection | 0-Doubt

Home
Vendors
Checkmarx
Checkmarx One Malicious Package Protection

Home
Vendors
Application Security (ASPM)
Checkmarx One Malicious Package Protection

Checkmarx One Malicious Package Protection

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 6 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Detects malicious open-source packages across SDLC using 410K+ package database

by Checkmarx · checkmarx.com · source ↗

Known CVEs (6)

CVE-2026-42994 ↗CRITICAL 9.82026
Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.
CVE-2023-35142 ↗HIGH 8.12023
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.
CVE-2022-46684 ↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Application Security (ASPM) products

Checkmarx One Application Security Platform · Checkmarx
Checkmarx One Assist · Checkmarx
Checkmarx One DAST · Checkmarx
Checkmarx One IaC Security · Checkmarx
Checkmarx One Software Composition Analysis (SCA) · Checkmarx
Checkmarx SAST · Checkmarx
Checkmarx SCA · Checkmarx
Checkmarx Tromzo AI Powered Application Security Posture Management · Checkmarx

MEDIUM 5.4

2022

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) v…

…and 3 more · see all on the vendor page →