Tag: vscode extension

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Worm That Keeps on Digging: Latest Wave

A sophisticated supply chain campaign targeting the open source developer ecosystem has emerged, compromising NPM packages in the @antv namespace, GitHub Actions including actions-cool/issues-helper, and the VSCode extension nrwl.angular-console. The malware initiates multi-stage infection chains u…
credential theft
supply chain attack
github actions
developer environments
npm packages
2026-05-19
backdoor persistence
cicd compromise
vscode extension
Published: May 19, 2026
Downloadable IOCs: 1
Click here to see more Attack Reports