NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

BACKGROUND
1 SIGNALFIRST DETECTED 22 April 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
23 Apr
New Checkmarx supply-chain breach affects KICS analysis tool

Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environments. [...]

REPORT · WHAT · BleepingComputerOPEN STORY
Sources
The Hacker News

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →