GCVE-110-OSM-2026-13081

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published October 2, 2026

Solidity syntax | Rust syntax (Deep Focus) is one of six cluster-linked extension identities Socket identified on Open VSX as part of the GlassWorm-linked theme cluster. It was promoted alongside other cluster extensions in a December 2025 DEV Community article published by a same-day-created account. No active payload was observed at time of analysis. No active payload observed in analyzed version. Promoted in a DEV Community article (2025-12-14) alongside Aurora Borealis, Charcoal Mint, and Cosmic Nebula, published by an account created the same day, consistent with coordinated promotional infrastructure for the cluster.

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

5.4/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
unknown	solidity-syntax.deep-focus	all (affected)	—

References

Malicious vscode package: solidity-syntax.deep-focus

advisory

vendor

Browse GCVE Records

3,112 records in the GCVE database · Updated October 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON