checkmarx.cx-dev-assist

MAL-2026-2232

VSCode:https://open-vsx.orgmalware3/26/2026
Description

Malicious code in checkmarx.cx-dev-assist (VSCode:https://open-vsx.org)

Indicators of Compromise
SHA256 Hashes (1)
b821135a3f6a7e85f6ed37a383363979118ad6c7b73433dd4882e99f24264155
Domains (1)
checkmarx.zone
References (3)
https://checkmarx.com/blog/checkmarx-security-update/ossf/malicious-packageshttps://www.wiz.io/blog/teampcp-attack-kics-github-actionossf/malicious-packageshttps://www.reversinglabs.com/blog/teampcp-supply-chain-attack-spreadsossf/malicious-packages
Details
EcosystemVSCode:https://open-vsx.org
Attack Typemalware
Published3/26/2026
Affected Versions
1.10.01.7.01.6.01.5.01.4.01.3.17721921781.3.17721915351.3.01.2.01.1.0
Quick Actions
All IncidentsVSCode:https://open-vsx.org Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001