# checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and: Checkmarx Supply Chain Compromise: Malicious VS Code Extensions and Docker Images

> Checkmarx Supply Chain Compromise: Malicious VS Code Extensions and Docker Images is a critical-severity supply chain compromise issue in Checkmarx KICS Docker images, an IDE extension. Affected: Checkmarx KICS Docker images, ast-github-action, kics-github-action, @bitwarden/cli@2026.4.0.

- **Canonical URL:** https://catalog.anomity.ai/vuln/checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and
- **Aliases:** ti-014
- **Severity:** critical
- **Attack type:** Supply chain compromise, Credential theft
- **Component:** Checkmarx KICS Docker images (IDE extension)
- **Catalog entry:** https://catalog.anomity.ai/agent/vscode
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-04-22
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and

## Summary

The ongoing Checkmarx supply chain campaign expanded in April 2026 with attackers publishing malicious KICS Docker images and VS Code extensions through compromised CI/CD pipelines. Stolen GitHub and npm tokens were used to inject credential-stealing malware into downstream packages. Data encrypted with AES-256-GCM is exfiltrated to audit.checkmarx[.]cx, a domain impersonating Checkmarx. The campaign also compromised Bitwarden CLI 2026.4.0 via the same attack chain.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Checkmarx KICS Docker images, ast-github-action, kics-github-action, @bitwarden/cli@2026.4.0 | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run Checkmarx KICS Docker images, ast-github-action, kics-github-action, @bitwarden/cli@2026.4.0.

## How do I fix it?

Remove @bitwarden/cli@2026.4.0 if installed. Rotate all exposed credentials (GitHub tokens, npm tokens, CI/CD secrets). Audit for outbound connections to audit.checkmarx.cx. Hunt for lock file /tmp/tmp.987654321.lock. Pin dependencies and verify checksums.

## How do I find every machine running Checkmarx KICS Docker images?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Checkmarx KICS Docker images and which version, then enforce a policy on it.

## References

- article: https://socket.dev/blog/bitwarden-cli-compromised

## Related vulnerabilities

- [nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code](https://catalog.anomity.ai/vuln/nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code) — critical
- [malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs](https://catalog.anomity.ai/vuln/malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs) — high
- [open-vsx-removes-77-malicious-evil-twin-ide-extensions](https://catalog.anomity.ai/vuln/open-vsx-removes-77-malicious-evil-twin-ide-extensions) — high
- [trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace](https://catalog.anomity.ai/vuln/trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace) — critical
- [litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook](https://catalog.anomity.ai/vuln/litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook) — critical
- [ghostaction-returns-a-security-audit-yml-workflow-pushed-from](https://catalog.anomity.ai/vuln/ghostaction-returns-a-security-audit-yml-workflow-pushed-from) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and