Excerpt
Secure your dependencies with us
Socket proactively blocks malicious open source packages in your code.
Install
Socket’s Threat Research team identified a developer-compromise supply chain attack distributed via the Open VSX Registry, specifically a compromise of the developer’s publishing credentials. The Open VSX security team assessed the activity as consistent with a leaked token or other unauthorized access.
On January 30, 2026, four established Open VSX extensions published by the oorzc author had malicious versions publis…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Socket on socket.dev.
Mentioned in the excerpt
More from Socket2
- Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access TrojanSocket · Published 28 Jul
- Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40 PackagesSocket · Published 15 Sep 2025
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
