audit[.]checkmarx[.]cx

Posts referencing this indicator

• TeamPCP-Linked Supply Chain Attack Hits SAP CAP and Cloud MTA npm Packages

  Socket

  Threat-actor-controlled domain used in prior TeamPCP-linked variants for telemetry and C2

  2026-05-13
• Supply chain attacks hit Checkmarx and Bitwarden developer tools

  Sophos

  Shared C2 domain used for exfiltrating harvested credentials and secrets.

  2026-05-13