vscode-frida

Frida Workbench for VSCode Repository | Issues | Install This is a community contributed project, not affiliated with the official Frida team. It is developed and maintained by @CodeColorist as an open-source extension for Visual Studio Code to enhance the Frida scripting experience. 中文说明...

CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...

live-server-evil-crawler

Live Server Evil Crawler A GitHub Pages site for demonstrating the Live Server VSCode extension vulnerability CVE-2025-65717. Overview This tool demonstrates a vulnerability where Live Server allows requests from any origin, enabling malicious web pages to access the Live Server running on...

vscode-github-token-grab-extension

hello-world README DO NOT INSTALL. This is an extension for me testing out vscode publishing...

CVE-2026-77157 ast-cli: Auto-update downloads are not verified against a checksum before execution

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

EUVD-2026-108271

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

CVE-2026-77157

The ast-cli tool is vulnerable to arbitrary binary execution because it fails to verify checksums for helper binaries (Vorpal ASCA real-time engine and SCA Resolver) during its auto-update flow. This flow is triggered by Checkmarx VSCode/JetBrains extensions and the cx scan "sca-realtime" command...

CVE-2026-77157 ast-cli: Auto-update downloads are not verified against a checksum before execution

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

Malicious Package

Overview vscode-vue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in vscode-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7221ac368a033274adc0a36ebde3b997cdb7ea0fe82b4f6cea1b75e8f37bca9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15894 Malicious code in vscode-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7221ac368a033274adc0a36ebde3b997cdb7ea0fe82b4f6cea1b75e8f37bca9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in AzureCdnInfo.edrtester (VSCode)

The Visual Studio Code Marketplace extension AzureCdnInfo.edrtester version 1.0.4 presents as an EDR/telemetry test utility but is a beaconing backdoor. On activation, extension.js loads edrdrill.js, which performs host reconnaissance — hostname, current working directory and local IP — and...

MAL-2026-16010 Malicious code in AzureCdnInfo.edrtester (VSCode)

The Visual Studio Code Marketplace extension AzureCdnInfo.edrtester version 1.0.4 presents as an EDR/telemetry test utility but is a beaconing backdoor. On activation, extension.js loads edrdrill.js, which performs host reconnaissance — hostname, current working directory and local IP — and...

Inclusion of Functionality from Untrusted Control Sphere

Overview @theia/plugin-ext-vscode is a Theia - Plugin Extension for VsCode Affected versions of this package are vulnerable to Inclusion of Functionality from Untrusted Control Sphere due to missing workspace-trust enforcement in the plugin and extension loading path. An attacker can execute...

@theia/vsx-registry (>=1.1.0-next.14531578, <=1.70.0-next.81), openvsx-server (>=1.59.0, <=1.59.1) potentially affected by CVE-2026-19884 via @theia/plugin-ext-vscode (>=1.1.0-next.14531578, <=1.70.0-next.81)

@theia/plugin-ext-vscode NPM version =1.1.0-next.14531578, =1.1.0-next.14531578, =1.59.0, =1.59.1 Source cves: CVE-2026-19884 Source advisory: SNYK:JS-THEIAPLUGINEXTVSCODE-18855353...

CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

...

UBUNTU-CVE-2026-48122

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...

@theia/ai-registry (>=1.73.0-next.2, <=1.74.0-next.70), @theia/plugin-dev (>=1.66.0, <=1.74.0-next.70) +4 more potentially affected by CVE-2026-12609 via @theia/plugin-ext (>=1.66.0, <=1.74.0-next.70)

@theia/plugin-ext NPM version =1.66.0, =1.73.0-next.2, =1.66.0, =1.66.0, =1.66.0, =1.66.0, =1.66.0, =1.74.0-next.70 Source cves: CVE-2026-12609 Source advisory: SNYK:JS-THEIAPLUGINEXT-18565098...

MAL-2026-11558 Malicious code in @cacheable/memory (npm)

npm/@cacheable/memory version 2.2.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...