{
  "affected": [
    {
      "package": {
        "ecosystem": "VSCode:https://open-vsx.org",
        "name": "aquasecurityofficial.trivy-vulnerability-scanner"
      },
      "versions": [
        "1.8.12",
        "1.8.13"
      ]
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "import_time": "2026-03-26T04:01:36.072549Z",
        "modified_time": "2026-03-26T04:00:51Z",
        "sha256": "b6cab1dae06f51e2aaa57704d8374b6882440070d0796e7b719a85e6f803888b",
        "source": "google-open-source-security",
        "versions": [
          "1.8.12",
          "1.8.13"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: google-open-source-security (b6cab1dae06f51e2aaa57704d8374b6882440070d0796e7b719a85e6f803888b)\nThis extension is a compromised version of the offical Trivy VSCode extension\navailable on the Microsoft Marketplace. Versions 1.8.11 and earlier\nuploaded to OpenVSX are non-malicious. Malicious behavior was added in v1.8.12\nand further refined in v1.8.13.\n\nThe extension attempts to run various AI tools with a prompt designed to\ngather sensitive information, and publish it via a GitHub repository.\n",
  "id": "MAL-2026-2230",
  "modified": "2026-03-26T04:00:51Z",
  "published": "2026-03-26T04:00:51Z",
  "references": [
    {
      "type": "ARTICLE",
      "url": "https://socket.dev/blog/unauthorized-ai-agent-execution-code-published-to-openvsx-in-aqua-trivy-vs-code-extension"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in aquasecurityofficial.trivy-vulnerability-scanner (VSCode:https://open-vsx.org)"
}