Checkmarx KICS GitHub Action Compromised: Malware Injected in All Git Tags

The Checkmarx KICS GitHub Action repository has been compromised with malware injected into all release tags. An infostealer payload was embedded in the Checkmarx/kics-github-action repository affecting all version tags. Organizations using this Action pinned to any version tag should immediately treat their CI/CD secrets as compromised. This represents a significant supply chain attack targeting development and security workflows. Immediate secret rotation is required for all affected environments. The compromise affects the popular security scanning tool used in CI/CD pipelines.