# Yeeth Security > Software supply chain security for package registries. Yeeth Security stops malicious packages at the registry level, before they reach a single user, and publishes threat research on malicious VS Code / Open VSX extensions, npm packages, and AI-agent tooling. Yeeth Security helped the Eclipse Foundation strengthen the Open VSX Registry with pre-publish checks, quarantine workflows, and threat-informed detection. ## Products - Argus: pre-publish malware interception inside a package registry. - DevGuard: inline package risk scores across VS Code and Open VSX editors. - Yeeth Claw: pre-install CLI hooks for Claude Code and other coding agents. - [Eclipse SCINTX](https://projects.eclipse.org/proposals/eclipse-scintx-supply-chain-intelligence-exchange): Supply Chain Intelligence Exchange, one API between registries and security scanners (common verdict model, consumer policy, signed webhooks). - [pkgscan.dev](https://pkgscan.dev/): free multi-engine malware scanner for npm, PyPI, VS Code extensions, agent skills, and more. ## Guides - [VS Code Extension Malware: How to Detect, Remove and Prevent It](https://yeethsecurity.com/guides/vscode-extension-malware/): how malicious VS Code extensions work, how to detect and remove them, and how they bypass security. ## Threat research - [The Dev Machine Is the Trust Boundary: Inside Binance's Record $6.3B Hack](https://yeethsecurity.com/blog/2026-10-30-Binance-DevOps-Laptop-Signing-Breach) (2026-10-30): Binance lost about $6.3 billion and says no private key leaked. Its own signing infrastructure produced every signature the attacker needed, including fifty EIP-7702 authorizations that handed a hot wallet to a 1.6 KB... - [Page Load Is a Trust Boundary: The Polymarket Script Drain](https://yeethsecurity.com/blog/2026-10-29-Polymarket-DebugBear-Drainer) (2026-10-29): A 15 KB page-speed script walked Polymarket's React tree, found the live order client, and used the site's own gasless relayer to move about $2.5 million out of logged-in accounts in 52 minutes. - [Four Ways a Repo Runs Code: The Capacitor 'Auth Error' Loader](https://yeethsecurity.com/blog/2026-10-28-Capacitor-Auth-Error-Loader) (2026-10-28): A 1 KB change to a Capacitor config file turns four ordinary developer actions into remote code execution, and the implant's failure mode is a login error. - [The Silent Autocomplete: Lolpaon.umltocode Hides Where Your Code Goes](https://yeethsecurity.com/blog/2026-10-26-Lolpaon-Umltocode-Silent-Autocomplete) (2026-10-26): A PlantUML-to-code converter held a quiet Marketplace listing for eight months. Then it grew a hidden AI autocomplete that sends your open file, the neighbouring files, and your course PDFs to an endpoint it obfuscate... - [language-pack-sol: The Solidity Pack That Ships Its Own Backdoor](https://yeethsecurity.com/blog/2026-10-25-Language-Pack-Sol-Nested-Dropper) (2026-10-25): The extension installs another extension under the real Solidity publisher's ID, and the implant's command server lives in an Ethereum contract. - [Eight VS Code Extensions, One RAT Engine: Inside the Task-Board Backdoor](https://yeethsecurity.com/blog/2026-10-25-Shared-RAT-Engine-VS-Code-Task-Boards) (2026-10-25): Eight Visual Studio Code extensions promised task boards, project dashboards, and a Roblox bridge. Each shipped the same hidden client: a five-second poll to a server that can run code and shell commands on the develo... - [SleepyDuck Registry-Hops: The Fake Solidity Extension Hits the VS Code Marketplace](https://yeethsecurity.com/blog/2026-10-22-Juanbanco-Web3tools-Marketplace-Dropper) (2026-10-22): For at most seventeen minutes this morning, a Solidity extension on the VS Code Marketplace served a backdoor. The rest of the time it serves a 2.4 KB stub that does nothing at all, which is the point. - [CodeAIAssistant: The VS Code MCP Install Prompt That Hides Its Payload](https://yeethsecurity.com/blog/2026-10-20-CodeAIAssistant-MCP-Install-Prompt) (2026-10-20): An AI coding assistant with a Privacy section that promises all analysis runs locally — in a 2.9 KB package with no AI code, whose only real feature is a Visual Studio Code install prompt that doesn't show what it ins... - [The zod Near-Miss: Publish-Time Scanning at the npm Registry Boundary](https://yeethsecurity.com/blog/2026-10-13-zod-npm-publish-time-scanning) (2026-10-13): A commit titled 'Fix bugs and improve performance' added a remote-controlled loader to three open-source repositories — zod among them. The only version that reached npm's publishing pipeline was blocked nine minutes ... - [SleepyDuck Returns: 2 fake Solidity Open VSX extensions hide a backdoor in an MP4](https://yeethsecurity.com/blog/2026-09-24-Alejandroaranda-Duck-Song-Dropper) (2026-09-24): The ASCII-art duck gave it away. A malware family Yeeth Security first caught as a tiny JavaScript loader on Open VSX in 2025 is back — and it grew up. Two fake Solidity extensions now ship a 205 MB video concealing a... - [The SadiqShuaibu campaign: 6 fake npm dependency checkers that embed a GitHub token and run remote code](https://yeethsecurity.com/blog/2026-08-21-SadiqShuaibu-Npm-Dep-Checker-C2) (2026-08-21): Checking npm package versions is one of the most common things a developer extension does. Six of them showed up from one publisher in under 100 minutes — sadiq-dep-checker, sadiq-dep-lens, sadiq-dep-helper, sadiq-dep... - [The roqueue-tools DevFlow campaign: 2 fake project-flow extensions that fetch JavaScript from a DuckDNS host and run it](https://yeethsecurity.com/blog/2026-08-20-Roqueue-Tools-DevFlow-Loader) (2026-08-20): Two project-flow extensions sit quietly for five minutes after you open your editor. Then they reach out to a free DuckDNS subdomain over plain HTTP, grab a JavaScript file, and run it with new Function. The host is d... - [Copilot for KeyBank — a 3 KB VSIX that beacons through github-cdn.net and waits for eval](https://yeethsecurity.com/blog/2026-08-19-Copilot-for-KeyBank-license-beacon) (2026-08-19): A single-file VS Code extension on the Microsoft Marketplace impersonates Copilot, DeepSeek, PyPI and KeyBank. On activation it phones github-cdn.net with Base64-encoded host identifiers, and waits for the word 'Autho... - [The boardflow campaign: 15 fake Kanban VS Code extensions that download and run a remote payload](https://yeethsecurity.com/blog/2026-08-19-Boardflow-Kanban-Dropper) (2026-08-19): Everyone wants a Kanban board inside their editor. Fifteen fake ones hit the Marketplace over ten weeks, each one a different publisher and a different board name — SlixBoard, FocusDeck, LineDeck, Trello-Board. Same s... - [The heyheyhey campaign: 6 fake Roblox VS Code extensions that fetch and run a remote script from GitHub](https://yeethsecurity.com/blog/2026-08-18-Heyheyhey-Roblox-Dropper) (2026-08-18): A Kanban board for Roblox developers sounds harmless enough. Six of them hit the VS Code Marketplace in three days — same version, same skeleton, same GitHub URL. The repo is gone now, but the extensions still come ba... - [28 Evil-Twin Open VSX Extensions - A New Wave of Coordinated Beacons](https://yeethsecurity.com/blog/2026-08-13-Apee-My-Id-Evil-Twin-Open-VSX-Beacon) (2026-08-13): Yeeth Security found 28 counterfeit extensions on Open VSX that exfiltrate the editor, hostname and extension identity to a remote server. The wave spanned twelve impersonated namespaces and used DNS, fetch, curl, nat... - [Solidity Pro's WhiteCobra Chassis: Cloudflare C2 to Telegram Infostealer](https://yeethsecurity.com/blog/2026-08-06-Solidity-Pro-WhiteCobra-C2-to-Telegram) (2026-08-06): Yeeth Security tracked a multi-version VS Code: extension campaign that posed as a Solidity tool. Early versions dropped an encrypted Python payload from Cloudflare Workers; later versions pivoted to a browser-wallet ... - [Supply Chain Security in 2026: The SBOM Layer Is Broken](https://yeethsecurity.com/blog/2026-07-27-Supply-Chain-Security-Registry-Perimeter) (2026-07-27): Most organizations can now generate a software bill of materials (SBOM), but few can turn it into a clean, remediated release. The supply chain security stack is fragmented across single-purpose tools, and the result ... - [The oast.fun campaign: VS Code extensions that exfiltrate system identifiers over DNS on every IDE launch](https://yeethsecurity.com/blog/2026-07-23-Oast-Fun-DNS-Beacon) (2026-07-23): A language extension called lotse-language-vscode shows up at version 13.37 — leet for elite. It declares one command: Hello World. And on every IDE launch, it quietly asks the DNS resolver to look up your username, h... - [Dropping Malware through Dependencies in VS Code: Inside the jsononifier npm Dropper](https://yeethsecurity.com/blog/2026-07-02-The-jsononifier-npm-Dropper) (2026-07-02): The VS Code extension ascii-fetcher.ascii-fetcher looked harmless because almost all of its code lived in a dependency. That dependency, @jaymara/jsononifier, XOR-decodes a hidden Windows command and executes it after... - [The Windows Installer Dropper Family: VS Code Extensions Living off the Land](https://yeethsecurity.com/blog/2026-07-02-The-Windows-Installer-Dropper-Family) (2026-07-02): In late June Argus caught a cluster of VS Code: droppers that all abused Windows installer primitives — curl|bash, irm|iex, cscript, mshta, and npm postinstall — to fetch and run remote payloads. - [The Fake MSDN DLL Dropper and the Counterfeit C++ Runtime](https://yeethsecurity.com/blog/2026-07-02-The-Fake-MSDN-DLL-Dropper) (2026-07-02): The worldline.aicodefix campaign downloads a counterfeit VCRUNTIME140.dll from a fake Microsoft domain, plants it inside a spoofed Edge user-data directory, and uses a hidden msedge.exe window to load it. - [DigitalBarberTrim's Side-Car Loader: A VSIX Installer That Pivots Across VS Code Forks](https://yeethsecurity.com/blog/2026-07-02-DigitalBarberTrim-Multi-IDE-VSIX-Installer) (2026-07-02): The DigitalBarberTrim.html-entity-codec campaign version-cycled through clean, malicious, and stub releases. The payload was a hidden i.js file that silently installed a remote VSIX package into VS Code, Cursor, Winds... - [OmniRouter AI: A Dropper in a Chat Sidebar](https://yeethsecurity.com/blog/2026-06-22-OmniRouter-AI-GuavaDuck) (2026-06-22): A VS Code: extension promising one sidebar for Claude, GPT, Gemini and DeepSeek instead runs a zero-width-obfuscated command that downloads a multi-stage PowerShell dropper. - [The Solidity Extension That Stole from the Clipboard: Inside the ethdevtools Crypto Swap](https://yeethsecurity.com/blog/2026-06-21-ethdevtools-Clipboard-Crypto-Stealer) (2026-06-21): A fake Solidity language extension hid in VS Code: for weeks before activating. Once it did, it scraped the clipboard for crypto seeds and private keys, swapped wallet addresses on paste, and exfiltrated everything th... - [The Scanner Is the Target: How IDE Extension Malware Uses Prompt Injection to Evade AI Review](https://yeethsecurity.com/blog/2026-06-18-The-Scanner-Is-the-Target) (2026-06-18): Malicious VS Code and Open VSX extensions are now embedding fake system instructions and context floods aimed directly at the AI-powered scanners that review them. Here is what Argus is catching, and why the scanner i... - [The Builder Kit Behind ShopifySTORES and State Diagram: A VSIX Dropper Campaign](https://yeethsecurity.com/blog/2026-06-18-The-Replit-MSI-and-State-Diagram-Campaign) (2026-06-18): A retro-hunt across Argus scan history tied the ShopifySTORES Replit MSI dropper and the State Diagram STDX dropper to the same builder kit. The sample Zlmiles.zlmiles-liquid-0.0.1.vsix ships Russian operator instruct... - [GLASSWORM.WASM: Deconstructing the TinyGo WebAssembly Loader Hitting Open VSX](https://yeethsecurity.com/blog/2026-06-16-Glassworm-WASM) (2026-06-16): Argus caught a variation of the GLASSWORM campaign and flagged seven malicious extension names. We uncover what the TinyGo-compiled WebAssembly payload does and explain why its obfuscation is both its strength and its... - [Hiding Commands in Icons: The nbtga Hello-World Malware Lab](https://yeethsecurity.com/blog/2026-06-15-Hiding-Commands-in-Icons) (2026-06-15): Twenty-six versions of the same VS Code extension, each testing a different concealment technique. One of them hid its PowerShell downloader inside the LSBs of its own icon.png. - [Inside the DPRK-Linked Backdoor Loitering in the VS Code Marketplace](https://yeethsecurity.com/blog/2026-06-09-jupyter-powerdev-backdoor) (2026-06-09): A notebook productivity tool turns into a full remote access implant whose architecture overlaps with two documented DPRK campaigns — Contagious Interview and DreamLoader. The combination of techniques is novel for th... - [A Deeper Look at GLASSWORM's Solana Variant](https://yeethsecurity.com/blog/2026-05-25-Glassworm-Solana) (2026-05-25): A new wave on Open VSX, a two-tier Solana dead-drop, and a Go-based backdoor. - [Recognized in the Open VSX Security Hall of Fame](https://yeethsecurity.com/blog/2026-05-21-OpenVSX-Hall-of-Fame) (2026-05-21): Yeeth Security has been added to the Open VSX Security Hall of Fame as a security guardian. A look at the work that led here, and what it validates. - [The CISO's Guide to IDE Security in 2026](https://yeethsecurity.com/blog/2026-05-21-CISO-Guide-IDE-Security) (2026-05-21): What developer-environment threats look like in 2026, and the controls security leaders should put in place. Written by Yeeth Security from the front lines of IDE marketplace defense. - [The Malware Factory: GLASSWORM Forensics in Open VSX](https://yeethsecurity.com/blog/2026-04-28-GlassWormBaneForensics) (2026-04-28): Sixteen extensions in 48 hours. All share one author. A forensic walkthrough of how Bane, Yeeth Security's threat-intelligence knowledge graph, attributes a campaign that surface-similarity tools cannot see. - [Weaponizing Empty Github Repositories with Releases](https://yeethsecurity.com/blog/2026-04-06-Francesca898) (2026-04-06): A campaign of VS Code extensions using GitHub releases as a payload delivery mechanism — and blockchain RPCs as command-and-control - [The Ghost in the Marketplace](https://yeethsecurity.com/blog/2026-03-20-GhostDrop) (2026-03-20): Analyzing a Massive 174-Account Surge on Open VSX - [Weaponizing Extension Packs with PackRAT](https://yeethsecurity.com/blog/2026-03-13-PackRat) (2026-03-13): Dissecting a Downloader Abusing Extension Packs for Stealthy Distribution - [Yeeth - 2025 Year in Review](https://yeethsecurity.com/blog/2025-12-31-YearInReview) (2025-12-31): A look back at what we did and where we are going. - [Secret Scanning with Aho-Corasick](https://yeethsecurity.com/blog/2025-12-28-AhoCorasick) (2025-12-28): Why scalable secret detection is a systems problem that matters - [A Deeper Look at RustImplant](https://yeethsecurity.com/blog/2025-12-05-RustImplant) (2025-12-05): Dissecting an Obfuscated Downloader with Anti-analysis Guardrails - [SleepyDuck Evolution](https://yeethsecurity.com/blog/2025-11-10-Ducky-Strikes-Again) (2025-11-10): Technical analysis a new iteration of SleepyDuck, a tiny loader that behaves like a backdoor. - [WhiteCobra Beginnings](https://yeethsecurity.com/blog/2025-09-03-WhiteCobra) (2025-09-03): Technical analysis of one of the early WhiteCobra samples in the wild. ## Contact - Website: https://yeethsecurity.com/ - Research blog: https://yeethsecurity.com/blog/ - RSS: https://yeethsecurity.com/feed.xml