Poisoned Pipeline / Platforms / VS Code / IDE
VS Code / IDE
23 mapped incident(s) that touched this platform or registry.
tensorlake 0.5.144 steals tokens, then wipes the home directory if they are revoked
npmGit / GitHubGitHub ActionsDeveloper workstationAI coding agentsVS Code / IDELinux distro / packagesWindows software
11 mapped techniques
GhostAction steals CI secrets, then autoruns a stealer from a fake font
Git / GitHubGitHub ActionsVS Code / IDEDeveloper workstation
16 mapped techniques
Apex Accelerator published a malicious npm coding agent and a fake audit MCP
npmmacOS softwareWindows softwareMCPAI coding agentsGit / GitHubVS Code / IDEDeveloper workstation
7 mapped techniques
testmetest npm names ship a Miasma-family worm that wipes the home directory if a stolen GitHub token is revoked
npmPyPIRubyGemsGit / GitHubGitLabGitHub ActionsDeveloper workstationAI coding agentsMCPVS Code / IDELinux distro / packagesmacOS softwareWindows software
10 mapped techniques
PolinRider poisons visanduma/nova-two-factor Packagist via Git
Packagist / ComposerGit / GitHubVS Code / IDE
7 mapped techniques
Hijacked AI coding assistant spreads Shai-Hulud
PyPIGit / GitHubAI coding agentsVS Code / IDEDeveloper workstation
8 mapped techniques
TeamPCP DUSTMAKER AI workspace poisoning
npmGitHub ActionsAI coding agentsMCPGit / GitHubVS Code / IDE
5 mapped techniques
@copilot-mcp/apex macOS infostealer republish
npmmacOS softwareMCPGit / GitHubKubernetesVS Code / IDE
4 mapped techniques
actions-cool GitHub Action tags still serve Mini Shai-Hulud after re-enablement
Git / GitHubGitHub ActionsVS Code / IDEAI coding agents
13 mapped techniques
Nx Console VS Code 18.95.0 (GitHub internal repo theft)
VS Code / IDEGit / GitHubDeveloper workstationGitHub Actions
3 mapped techniques
TanStack Mini Shai-Hulud (CVE-2026-45321)
npmGitHub ActionsAI coding agentsVS Code / IDEDeveloper workstation
18 mapped techniques
GlassWorm across GitHub, npm, Open VSX, VS Code, Python
Git / GitHubnpmVS Code / IDEPyPIBrowser extensions
4 mapped techniques
Contagious Interview stage-2 in Git pre-commit / post-checkout hooks
Git / GitHubLinux distro / packagesmacOS softwareWindows softwareVS Code / IDE
4 mapped techniques
PolinRider (DPRK) Git-to-registry jump
Git / GitHubGo modulesPackagist / ComposernpmVS Code / IDE
6 mapped techniques
hackerbot-claw autonomous GitHub Actions exploitation
GitHub ActionsGit / GitHubAI coding agentsVS Code / IDE
7 mapped techniques
npm packages hijack Cursor on macOS
npmmacOS softwareVS Code / IDEGit / GitHubWindows software
3 mapped techniques
DarkGPT / Codo-AI / bitcoin-auto-trading VS Code extensions
VS Code / IDEWindows softwareGit / GitHubmacOS software
5 mapped techniques
DPRK Contagious Interview (BeaverTail / npm + git)
npmPyPIGit / GitHubVS Code / IDE
6 mapped techniques