Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
2026-04-23T07:24:11Z•feddd58bcd6f0bf5edd28c653557f05bd56195c59f05807de2642f8f6c38b511
AI-supply-chainCISA-KEVMicrosoft-GraphOT-targetingRCEbackdoorcontainer-escapedockermalwarenpmprivilege-escalationransomwaresandbox-escapeserial-to-ipsupply-chainvulnerability-disclosurewiperworm
What happened
The feed reports multiple high-impact supply-chain compromises and critical remote-code-execution vulnerabilities. Notable incidents include malicious images and VS Code extensions pushed to the official checkmarx/kics Docker repo and a self‑propagating npm worm (CanisterSprawl) stealing developer tokens; Harvester deploying a Linux GoGra backdoor using Microsoft Graph for covert C2; Lotus Wiper destructive attacks against Venezuelan energy systems; and the discovery of 22 BRIDGE:BREAK flaws affecting Lantronix and Silex serial‑to‑IP converters. Several critical vulnerabilities with high CVSSs
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- feddd58bcd6f0bf5edd28c653557f05bd56195c59f05807de2642f8f6c38b511
- Enrichment time
- 2026-04-23T07:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.