Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

Multiple high-impact supply-chain compromises, critical remote-code-execution flaws, and active malware campaigns were reported. Notable supply-chain incidents include malicious images/tags pushed to the official checkmarx/kics Docker Hub repo and a self‑propagating npm worm (CanisterSprawl) that steals developer tokens. Several critical vulnerabilities enabling sandbox/container escapes and RCE were disclosed (Terrarium, SGLang, ASP.NET Core), alongside active exploitation and KEV additions; numerous malware operations were observed (Harvester GoGra Linux backdoor using Microsoft Graph API, a