Malicious Artifacts Found in Official KICS Docker Repository and Code Extensions

Reported 22 Apr 2026 by otx · Severity: medium

Docker and Socket uncovered a supply chain compromise affecting Checkmarx KICS distribution channels. Attackers poisoned official Docker Hub images (tags v2.1.20, v2.1.21, alpine) and VS Code extensions (versions 1.17.0, 1.19.0), introducing unauthorized data exfiltration capabil