pwn.watch: VS Code incident updates

[high] GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos

Thu, 22 Oct 2026 10:04:00 GMT

GhostAction, a campaign first documented by GitGuardian in Sept 2025, came back in 2026. It hit 772 repos in Aug-Sep 2026, then surged on Oct 8-12: about 1,900 compromised GitHub accounts pushed fake 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from running around Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found in 94 repos.

Status: live · Patch: partial

Latest updates:

2026-10-16: OpenSourceMalware finds a second stage in 94 repos: VS Code tasks.json autoruns a stealer hidden in a fake Font Awesome .woff2 and installs a 5-minute cron. (source)
2026-10-13: GitGuardian update: Oct 8-12 wave targeted 30,000+ repos across ~3,000 users/orgs from ~1,900 compromised accounts; 3,174 secrets targeted. (source)
2026-10-11: Phishing kit on my-github.com steals password + 2FA and silently authorizes an OAuth app with repo/workflow scopes. (source)

[critical] TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions

Tue, 31 Mar 2026 00:00:00 GMT

Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.

Status: closed · Patch: patched · Fixed in: trivy-action >= v0.35.0, setup-trivy >= v0.2.6, Checkmarx AST/KICS patched releases per Checkmarx updates

Latest updates:

2026-03: Trivy compromise disclosed; Microsoft guidance published.
2026-03: Campaign expands to Checkmarx GitHub Actions (Sysdig / Checkmarx updates).

[high] GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode

Fri, 31 Oct 2025 00:00:00 GMT

Koi Security found extensions on OpenVSX (and one on Microsoft's marketplace) carrying JavaScript hidden in invisible Unicode variation selectors. The malware stole npm, GitHub, Git and OpenVSX credentials to infect more extensions, went after crypto wallets, and set up SOCKS proxies and hidden VNC.

Status: closed · Patch: patched · Fixed in: Malicious releases removed from the marketplaces

Latest updates:

2025-10-20: Wider coverage; Microsoft marketplace extension also affected (source)
2025-10-17: Koi Security discloses GlassWorm on OpenVSX (source)