Product
VSCode
- First Reported
- May 19, 2026
- Latest Reported
- Jun 1, 2026
Reported Context (2)
- for signs of compromise. Teams should audit systems for the affected packages, GitHub Actions, and VSCode extensions, while also reviewing GitHub activity for unauthorized repositories, newly created access Miasma Supply-Chain Attack Compromises Red Hat npm Packages
- targeting the open source ecosystem reemerged on May 19th, affecting NPM packages, GitHub Actions, and a VSCode extension. The distributed malware was designed to harvest credentials, exfiltrate sensitive data, and TeamPCP Supply-Chain Campaign Targets npm Packages, GitHub Actions and a VSCode Extension
Malware (2)
Threat Actors (1)
MITRE ATT&CK (9)
Vendors (1)
Products (3)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.