🧰 Jenkins

The items that name it 8

• Software supply chain security best practices for 2026
  articleas affected products2026-10-21
• 2024 Dependency Management Report | Endor Labs
  paperas affected products2026-10-12
• US Disrupts Chinese State-Sponsored Hacking Tools
  articleas affected products2026-10-09

  Targeted by MicroScan vulnerability scanning

• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas affected products2026-08-20
• npm-scan
  repoas tools2026-08-05

  CI/CD platform integration for npm-scan

• From Cookies to Keys: The Threat of Session Hijacking
  articleas affected products2026-05-26

  Credential files harvested, $100+.

• Securing Jenkins: Top Attack Flows & Misconfigurations | Wiz Blog
  articleas affected products2026-05-06

  Open-source automation server for CI/CD orchestration; found in over a third of cloud environments, 59% of environments using it have instances vulnerable to critical-severity core vulnerabilities, 2% expose vulnerable instances directly to internet, over 87% of environments contain end-of-life inst

• FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
  articleas affected productsIt is written here as Jenkins (fake).

  Counterfeit MCP server/skill lure posing as Jenkins tooling.