A Claude Code extension on Open-VSX shipped with 66 extra lines of JavaScript
Written by detections.ai · Organizer
A recent version of the Claude Code extension on Open-VSX shipped with 66 extra lines of JavaScript that ran the moment it loaded.
The community rallied behind the threat and produced more than ten Intel Exchange reports, the most of any threat this week.
Additionally, currently live this week on detections.ai:
➡️ OpenSourceMalware found the loader adding an SSH key labeled "svc-telemetry", opening a reverse SSH tunnel to its C2 and beaconing the names of cloud and credential environment variables over plain HTTP.
Find detections here.
➡️ Key Eater signs into Entra ID and Azure DevOps with stolen client secrets and federated workload identities, so user MFA never comes into play. Todyl counts about 18 organizations targeted since November 1, mostly MSPs.
Explore detections here.
➡️ CVE-2026-58115 leaves the Node-RED admin API open to unauthenticated requests, and VulnCheck sees it exploited. One POST to "/flows" deploys "exec" nodes that plant a Linux bot in /dev/shm.
More detections here.
➡️ CrowdStrike has VAPOR PANDA running the ARTEX agentic framework on DeepSeek and other commercial models against more than 200 organizations since October. The agents chain SAML/XXE flaws and cloud metadata exploitation into admin access across several environments at once
Detections can be found here.
➡️ CISA added Fragnesia (CVE-2026-46300), a Linux kernel flaw that lets an unprivileged user corrupt the page cache of binaries like /usr/bin/su, to KEV in October. It's often chained with last week's PHP2Shell to go from web worker to root.
Detections found here.
Detection coverage for all five is live on detections.ai, in addition to many other reports found on the Intel Exchange.
