Tag: checkmarx kics

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious Artifacts Found in Official KICS Docker Repository and Code Extensions

Docker and Socket uncovered a supply chain compromise affecting Checkmarx KICS distribution channels. Attackers poisoned official Docker Hub images (tags v2.1.20, v2.1.21, alpine) and VS Code extensions (versions 1.17.0, 1.19.0), introducing unauthorized data exfiltration capabilities. The trojaniz…

credential theft

ci/cd compromise

supply chain compromise

docker hub poisoning

npm propagation

vs code extension

Published: April 22, 2026

Downloadable IOCs: 13

Click here to see more Attack Reports