Koi

Company

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

January 5, 2026

Last Seen

January 28, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (2)

PackageGate Vulnerabilities Affect Major JavaScript Package Managers

Jan 28·2 sources

Malicious Extension Risks in AI-Powered VSCode Forks

Jan 5·3 sources

Related Articles (2)

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

Securityaffairs.Co·Jan 28

VSCode IDE forks expose users to "recommended extension" attacks

Bleepingcomputer·Jan 5

Related Entities

Supply Chain Attack Azure OpenVSX Pnpm Visual Studio Marketplace Vlt VSCode Bun Npm PackageGate