aquasecurityofficial.trivy-vulnerability-scanner

MAL-2026-2230

VSCode:https://open-vsx.orgmalware3/26/2026
Description

Malicious code in aquasecurityofficial.trivy-vulnerability-scanner (VSCode:https://open-vsx.org)

Indicators of Compromise
SHA256 Hashes (1)
b6cab1dae06f51e2aaa57704d8374b6882440070d0796e7b719a85e6f803888b
References (1)
https://socket.dev/blog/unauthorized-ai-agent-execution-code-published-to-openvsx-in-aqua-trivy-vs-code-extensionossf/malicious-packages
Details
EcosystemVSCode:https://open-vsx.org
Attack Typemalware
Published3/26/2026
Affected Versions
1.8.121.8.13
Quick Actions
All IncidentsVSCode:https://open-vsx.org Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001