Fallout in vscode, Sep 21 – Sep 27

What we caught this week while monitoring over 181,851,176 artifacts across 51 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

YESTERDAY

Sun Sep 27 · 3 catches · 0 waves · 3 singles

20h

omid-io/antigravity-rtl 1.0.1 vscode 20 hours ago

Patches IDE main.js, injects code

app/replace

21h

omid-io/antigravity-rtl 1.0.0 vscode 21 hours ago

Patches IDE main.js, injects code

app/replace

yuzhiqiang/antigravity-ide-cockpit 1.3.16 vscode 1 day ago

Hidden process execution and obfuscation

destroy/file-deletionrecon-exfil/callback

SATURDAY

Sat Sep 26 · 1 catch · 0 waves · 1 single

SZLK/solopreneur-roadmap 0.0.484 vscode 1 day ago

Persists autonomous agent, remote C2

extensions/vscode

FRIDAY

Fri Sep 25 · 2 catches · 0 waves · 2 singles

juanfranblanco/solidity-vscode 0.0.191 vscode 2 days ago

installs persistence, evades AV, obfuscated payload

system/supervised

alejandroaranda/solidity-languini 0.9.2 vscode 3 days ago

Malicious VS Code extension payload

system/supervised

THURSDAY

Thu Sep 24 · 1 catch · 0 waves · 1 single

SZLK/solopreneur-roadmap 0.0.480 vscode 4 days ago

Persists malicious runtime services

extensions/vscode

O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories