Unverified50% confidenceEventExact time
The event-stream malicious code injection incident planted theft code targeting a specific cryptocurrency wallet in a sub-dependency, and had been downloaded millions of times before it was discovered.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
Unverified历史上已有多起通过恶意VS Code扩展窃取开发者凭证的安全事件被报告71% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.70% similarUnverifiedSources of stolen passwords include data breaches, phishing attacks, malware theft, and credential databases sold on dark web markets.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1004439API
curl https://kongchang.com/api/v1/knowledge/claims/1004439MCP
get_claim(id=1004439)