Stolen Trivy credentials used to publish rogue Checkmarx Jenkins plugin | Hacker News Reader