GCVE-110-OSM-2026-351

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published June 9, 2026

Suspicious package detected. Microsoft removal context: Extension ID: mathieu42.monokai-dark-by-mathieu42 Publisher: mathieu42 Removal Date: 6/1/2026 Violation Type: impersonation Removed from the VS Code Marketplace by Microsoft for violating marketplace policies. Source: https://github.com/microsoft/vsmarketplace/blob/main/RemovedPackages.md INDICATORS (IOCs) - urls: https://www.mathieu42.com, https://cursor.com, http://schemas.openxmlformats.org/package/2006/content-types - domains: www.mathieu42.com, cursor.com, mathieu42.com

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

5.4/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
unknown	mathieu42.monokai-dark-by-mathieu42	all (affected)	—
unknown	flutxvs.vscode-kuberntes-extension	all (affected)	—
unknown	Rg.Plugins.Popups.Net	all (affected)	—
unknown	federicanc.dotenv-syntax-highlighting	all (affected), all (affected), all (affected), all (affected), all (affected), * (affected)	—
unknown	intellipro.extension-json-intelligence	all (affected), all (affected), all (affected), * (affected), all (affected), all (affected), all (affected), * (affected)	—