Back Cybersecuritynews

Threat Actors Exploit OpenVSX Aqua Trivy with Malicious AI Prompts to Hijack Local Coding Tools

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

A supply chain attack targeting developers surfaced on March 2, 2026, when unauthorized code was found inside two versions of the Aqua Trivy VS Code extension on the OpenVSX registry. The compromised versions — 1.8.12 and 1.8.13 — were uploaded on February 27 and 28, 2026, under the aquasecurityofficial.trivy-vulnerability-scanner namespace. The attack introduced hidden natural-language prompts designed […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack Targets Aqua Trivy Extensions with Malicious AI Prompts On March 2, 2026, a supply chain attack was identified affecting developers using the Aqua Trivy VS Code extension. Unauthorized code was discovered in versions 1.8.12 and 1.8.13, which were uploaded to the OpenVSX registry on February 27 and 28, 2026. The attack involved the introduction of hidden natural-language prompts designed to hijack local coding tools. 2 sources 26

Extracted Entities

Threat Actors Exploit OpenVSX Aqua Trivy with Malicious AI Prompts to Hijack Local Coding Tools

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Tools (1)