Skip to content
Threat Feed
Subscribe

Product

VS Code

5 briefs RSS
high advisory

Multiple Vulnerabilities in Microsoft Development Tools

Multiple vulnerabilities in Microsoft development tools allow remote, anonymous attackers to perform privilege escalation, bypass security mechanisms, and perform unauthorized information manipulation or disclosure.

Visual Studio +1 vulnerability development-tools privilege-escalation
1t
high threat

Nimbus Manticore Targets Developers with Node.js-based Cross-Platform RATs

The Iranian threat actor Nimbus Manticore is distributing NodeRabbit and PollCat cross-platform RATs via trojanized coding challenges on LinkedIn to compromise developer systems.

VS Code +1 Nimbus Manticore espionage rat phishing recruitment cross-platform
1r 3t 3i
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +102 campaign shai-hulud
20i updated
critical threat

Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages

The Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.

router +11 TeamPCP supply-chain supply-chain-attack npm pypi credential-theft shai-hulud
3r 7t 3i
medium advisory

Suspicious Execution from VS Code Extension

Malicious VS Code extensions can execute arbitrary commands, leading to initial access and subsequent payload deployment on Windows systems.

VS Code initial-access execution supply-chain-compromise vscode
2r 9t