Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

17
Total Incidents

nrwl.angular-console

VSCode:https://open-vsx.org

MAL-2026-5162

Malicious code in nrwl.angular-console (VSCode:https://open-vsx.org)

Backdoor
Jun 2026

checkmarx.cx-dev-assist

VSCode:https://open-vsx.org

MAL-2026-2232

Malicious code in checkmarx.cx-dev-assist (VSCode:https://open-vsx.org)

Malware
Mar 2026

checkmarx.ast-results

VSCode:https://open-vsx.org

MAL-2026-2231

Malicious code in checkmarx.ast-results (VSCode:https://open-vsx.org)

Malware
Mar 2026

aquasecurityofficial.trivy-vulnerability-scanner

VSCode:https://open-vsx.org

MAL-2026-2230

Malicious code in aquasecurityofficial.trivy-vulnerability-scanner (VSCode:https://open-vsx.org)

Malware
Mar 2026

SIRILMP.dark-theme-sm

VSCode:https://open-vsx.org

MAL-2025-191167

Malicious code in SIRILMP.dark-theme-sm (VSCode:https://open-vsx.org)

Malware
Nov 2025

codejoy.codejoy-vscode-extension

VSCode:https://open-vsx.org

MAL-2025-191159

Malicious code in codejoy.codejoy-vscode-extension (VSCode:https://open-vsx.org)

Malware
Nov 2025

CodeInKlingon.git-worktree-menu

VSCode:https://open-vsx.org

MAL-2025-191158

Malicious code in CodeInKlingon.git-worktree-menu (VSCode:https://open-vsx.org)

Malware
Nov 2025

srcery-colors.srcery-colors

VSCode:https://open-vsx.org

MAL-2025-191169

Malicious code in srcery-colors.srcery-colors (VSCode:https://open-vsx.org)

Malware
Nov 2025

ellacrity.recoil

VSCode:https://open-vsx.org

MAL-2025-191160

Malicious code in ellacrity.recoil (VSCode:https://open-vsx.org)

Malware
Nov 2025

JScearcy.rust-doc-viewer

VSCode:https://open-vsx.org

MAL-2025-191164

Malicious code in JScearcy.rust-doc-viewer (VSCode:https://open-vsx.org)

Malware
Nov 2025

TretinV3.forts-api-extention

VSCode:https://open-vsx.org

MAL-2025-191170

Malicious code in TretinV3.forts-api-extention (VSCode:https://open-vsx.org)

Malware
Nov 2025

jeronimoekerdt.color-picker-universal

VSCode:https://open-vsx.org

MAL-2025-191163

Malicious code in jeronimoekerdt.color-picker-universal (VSCode:https://open-vsx.org)

Malware
Nov 2025

kleinesfilmroellchen.serenity-dsl-syntaxhighlight

VSCode:https://open-vsx.org

MAL-2025-191165

Malicious code in kleinesfilmroellchen.serenity-dsl-syntaxhighlight (VSCode:https://open-vsx.org)

Malware
Nov 2025

l-igh-t.vscode-theme-seti-folder

VSCode:https://open-vsx.org

MAL-2025-191166

Malicious code in l-igh-t.vscode-theme-seti-folder (VSCode:https://open-vsx.org)

Malware
Nov 2025

ginfuru.better-nunjucks

VSCode:https://open-vsx.org

MAL-2025-191161

Malicious code in ginfuru.better-nunjucks (VSCode:https://open-vsx.org)

Malware
Nov 2025

sissel.shopify-liquid

VSCode:https://open-vsx.org

MAL-2025-191168

Malicious code in sissel.shopify-liquid (VSCode:https://open-vsx.org)

Malware
Nov 2025

grrrck.positron-plus-1-e

VSCode:https://open-vsx.org

MAL-2025-191162

Malicious code in grrrck.positron-plus-1-e (VSCode:https://open-vsx.org)

Malware
Nov 2025
Showing 1 - 17 of 17
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001