Checkmarx, an application security company that provides developer-focused security testing tools, has suffered a second compromise within a month after attackers injected credential-stealing malware into widely used software distributed through Docker Hub and Visual Studio Code extensions.