{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T18:38:01.102Z",
  "tag": {
    "id": "vscode",
    "label": "VS Code",
    "isStack": false,
    "url": "https://pwn.watch/t/vscode",
    "feed": "https://pwn.watch/t/vscode/feed.xml"
  },
  "counts": {
    "incidents": 3,
    "live": 1,
    "notFullyPatched": 1,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "ghostaction-github-workflows-oct-2026",
      "title": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026",
      "json": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026.json",
      "status": "live",
      "severity": "high",
      "patchStatus": "partial",
      "product": "GitHub repositories / GitHub Actions (compromised maintainer accounts)",
      "tags": [
        "github-actions",
        "devtools",
        "github",
        "vscode"
      ],
      "cveIds": [],
      "affectedVersions": [
        "Repos where a compromised account pushed security-audit.yml / github_actions_security.yml (Oct 8-12 2026 wave), and repos with the tasks.json + public/fonts/fa-solid-400.woff2 second stage"
      ],
      "fixedVersions": [],
      "startedAt": "2026-10-08",
      "closedAt": null,
      "updatedAt": "2026-10-22T12:04:00+02:00",
      "summary": "GhostAction, a campaign first documented by GitGuardian in Sept 2025, came back in 2026. It hit 772 repos in Aug-Sep 2026, then surged on Oct 8-12: about 1,900 compromised GitHub accounts pushed fake 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from running around Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found in 94 repos.",
      "xPost": null
    },
    {
      "slug": "teampcp-trivy-checkmarx-supply-chain",
      "title": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions",
      "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain",
      "json": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Aqua Trivy, trivy-action, setup-trivy, Checkmarx AST/KICS GitHub Actions, related Docker/VS Code artifacts",
      "tags": [
        "github-actions",
        "docker",
        "devtools",
        "github",
        "trivy",
        "checkmarx",
        "vscode",
        "supply-chain"
      ],
      "cveIds": [],
      "affectedVersions": [
        "Trivy v0.69.4; trivy-action before v0.35.0; setup-trivy before v0.2.6; Checkmarx AST v2.3.28; KICS before v2.1.20 (per vendor/CSA guidance)"
      ],
      "fixedVersions": [
        "trivy-action >= v0.35.0",
        "setup-trivy >= v0.2.6",
        "Checkmarx AST/KICS patched releases per Checkmarx updates"
      ],
      "startedAt": "2026-03-01",
      "closedAt": "2026-03-31",
      "updatedAt": "2026-03-31",
      "summary": "Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.",
      "xPost": null
    },
    {
      "slug": "glassworm-vscode-openvsx-worm-october-2025",
      "title": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode",
      "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025",
      "json": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "VS Code extensions on OpenVSX and the VS Code Marketplace",
      "tags": [
        "devtools",
        "glassworm",
        "vscode",
        "openvsx",
        "supply-chain",
        "worm",
        "crypto"
      ],
      "cveIds": [],
      "affectedVersions": [
        "e.g. CodeJoy 1.8.3/1.8.4, cline-ai-agent 3.1.3 (Microsoft marketplace) and several OpenVSX extensions (see Koi list)"
      ],
      "fixedVersions": [
        "Malicious releases removed from the marketplaces"
      ],
      "startedAt": "2025-10-17",
      "closedAt": "2025-10-31",
      "updatedAt": "2025-10-31",
      "summary": "Koi Security found extensions on OpenVSX (and one on Microsoft's marketplace) carrying JavaScript hidden in invisible Unicode variation selectors. The malware stole npm, GitHub, Git and OpenVSX credentials to infect more extensions, went after crypto wallets, and set up SOCKS proxies and hidden VNC.",
      "xPost": null
    }
  ],
  "posts": [
    {
      "authorName": "Threat Intelligence",
      "handle": "threatintel",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1696530233028161536/U_hdVndn_bigger.jpg",
      "text": "#ThreatProtection GhostAction now phishes open-source maintainers with fake GitHub sign-in alerts to steal credentials, 2FA codes and OAuth tokens. Read more about Symantec’s protection: https://t.co/GN7LOBQNZj",
      "date": "2026-10-14T07:22:43.000Z",
      "url": "https://x.com/threatintel/status/2110270059365191876",
      "media": [],
      "incident": "ghostaction-github-workflows-oct-2026"
    }
  ],
  "changes": [
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-16",
      "title": "OpenSourceMalware finds a second stage in 94 repos: VS Code tasks.json autoruns a stealer hidden in a fake Font Awesome .woff2 and installs a 5-minute cron.",
      "body": null,
      "sourceUrl": "https://opensourcemalware.com/blog/ghostaction-copycats-polinrider-by-hiding-a-stealer-in-a-fake-font-file",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-13",
      "title": "GitGuardian update: Oct 8-12 wave targeted 30,000+ repos across ~3,000 users/orgs from ~1,900 compromised accounts; 3,174 secrets targeted.",
      "body": null,
      "sourceUrl": "https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-11",
      "title": "Phishing kit on my-github.com steals password + 2FA and silently authorizes an OAuth app with repo/workflow scopes.",
      "body": null,
      "sourceUrl": "https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-09",
      "title": "Socket counts 500+ accounts committing the workflow to tens of thousands of repos; GitHub starts preventing the workflow from running; my-github.com registered.",
      "body": null,
      "sourceUrl": "https://socket.dev/blog/ghostaction-cloud-credentials",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-08",
      "title": "Accounts of pyxel author Takashi Kitao (27 repos, 13:20 UTC) and henrywoo (318 repos in 16 min, incl. uber/athenadriver) push security-audit.yml; run logs confirm exfiltration.",
      "body": null,
      "sourceUrl": "https://www.stepsecurity.io/blog/ghostaction-returns",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-08-31",
      "title": "2026 resurgence: 772 public repos and 2,577 secrets targeted between Aug 31 and Sep 30; new exfil IP 193.32.204.199 in use from ~Sep 4.",
      "body": null,
      "sourceUrl": "https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    },
    {
      "incident": "teampcp-trivy-checkmarx-supply-chain",
      "incidentTitle": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-03",
      "title": "Trivy compromise disclosed; Microsoft guidance published.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain"
    },
    {
      "incident": "teampcp-trivy-checkmarx-supply-chain",
      "incidentTitle": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-03",
      "title": "Campaign expands to Checkmarx GitHub Actions (Sysdig / Checkmarx updates).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain"
    },
    {
      "incident": "glassworm-vscode-openvsx-worm-october-2025",
      "incidentTitle": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-20",
      "title": "Wider coverage; Microsoft marketplace extension also affected",
      "body": null,
      "sourceUrl": "https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/",
      "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025"
    },
    {
      "incident": "glassworm-vscode-openvsx-worm-october-2025",
      "incidentTitle": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-17",
      "title": "Koi Security discloses GlassWorm on OpenVSX",
      "body": null,
      "sourceUrl": "https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace",
      "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025"
    },
    {
      "incident": "ghostaction-github-workflows-oct-2026",
      "incidentTitle": "GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2025-09",
      "title": "GitGuardian first documents GhostAction: 817 repos, 327 users, 3,325+ secrets stolen. (Earlier campaign, for context.)",
      "body": null,
      "sourceUrl": "https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/",
      "url": "https://pwn.watch/i/ghostaction-github-workflows-oct-2026"
    }
  ]
}