Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Introducing Socket Scanning for VS Code Marketplace Extensions
Excerpt
If 2026 has shown us anything, it’s that the software supply chain doesn’t stop at the dependencies in your apps. It includes the tools your developers use to write, build, and ship code. VS Code extensions run inside an environment full of source code, credentials, and access to company infrastructure. A malicious extension can put all of that within an attacker’s reach. Today, we’re launching experimental support for scanning VS Code Marketplace extensions. This extends our…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://fingercakes4sale.store/dsyuC | High | Score 63/100 | First seen |
IOC Relationship Graph
Building graph…