Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Published: (April 22, 2026 at 01:55 PM EDT)
1 min read
Source: The Hacker News
Source: The Hacker News
Cybersecurity researchers have warned of malicious images pushed to the official checkmarx/kics Docker Hub repository.
In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to overwrite existing tags, including v2.1.20 and alpine, while also introducing a new v2.1.21 tag that does not correspond to an official release.