Product
VS Code extensions
- First Reported
- Apr 27, 2026
- Latest Reported
- Apr 27, 2026
Reported Context (1)
- Threat actors LAPSUS$ and TeamPCP have been linked to the wider incident, which involved Trivy-related tampering and impacted KICS, VS Code extensions, GitHub Actions workflows, and briefly the Bitwarden CLI npm package. Checkmarx Says Data From GitHub Repository Was Posted on Dark Web After Supply-Chain Attack
Threat Actors (2)
MITRE ATT&CK (1)
Vendors (3)
Products (3)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.