MAL-2026-2230

Details

-= Per source details. Do not edit below this line.=-

Source: google-open-source-security (b6cab1dae06f51e2aaa57704d8374b6882440070d0796e7b719a85e6f803888b)

This extension is a compromised version of the offical Trivy VSCode extension available on the Microsoft Marketplace. Versions 1.8.11 and earlier uploaded to OpenVSX are non-malicious. Malicious behavior was added in v1.8.12 and further refined in v1.8.13.

The extension attempts to run various AI tools with a prompt designed to gather sensitive information, and publish it via a GitHub repository.

Affected Packages

aquasecurityofficial.trivy-vulnerability-scanner

VSCode https //open-vsx.org

Affected versions:

1.8.121.8.13

References

ARTICLE

https://socket.dev/blog/unauthorized-ai-agent-execution-code-published-to-openvsx-in-aqua-trivy-vs-code-extension