| high |
Malicious Artifacts Found in Official KICS Docker Repository and Code Extensions |
threat-intel |
otx |
94.154.172.43 | ff7b0f114f87c674…, e1023db24a29ab02… |
docker hub poisoning, github actions, mcpaddon.js, credential theft, npm propagation, ci/cd compromise, canister worm, checkmarx kics, vs code extension, supply chain compromise, supply-chain |
2026-04-22 |
| medium |
Untangling a Linux Incident With an OpenAI Twist (Part 2) |
threat-intel |
otx |
CVE-2025-30406, CVE-2025-55182, CVE-2025-31151, CVE-2022-1388, CVE-2025-47812 | 62.60.246.210, 147.45.41.25 | 781c19b56fbdb172…, 3a5cb5689b6d4a97… |
cryptominer, repocket, botnet, linux compromise, multiple threat actors, credential harvesting, systemd-logind, dnser, ai-assisted remediation, earnfm, fkkkf, cve-2025-55182, xmrig, fh8a7d7m, data exfiltration, react2shell, information stealer, anti-analysis techniques, agent tesla, powershell, chm files, compiled html help, ftp exfiltration, javascript obfuscation, codex ai, multi-actor, living-off-the-land, edr evasion, credential theft, monero mining, phishing |
2026-04-22 |