GCVE-110-OSM-2026-403

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published May 29, 2026

Suspicious package detected. Microsoft removal context: Extension ID: RYNBD.rynbd-laragon-terminal-pro Publisher: RYNBD Removal Date: 5/20/2026 Violation Type: impersonation Removed from the VS Code Marketplace by Microsoft for violating marketplace policies. Source: https://github.com/microsoft/vsmarketplace/blob/main/RemovedPackages.md IOCs: - urls: https://ryn.bd, http://schemas.openxmlformats.org/package/2006/content-types - domains: ryn.bd

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

5.4/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
unknown	RYNBD.rynbd-laragon-terminal-pro	all (affected)	—
unknown	pyscopexte.pyscope-extension	all (affected)	—
unknown	AiagentPro.pydebugpro	all (affected)	—
unknown	amkig.i18n-ally-po	all (affected), all (affected), all (affected), all (affected), all (affected), all (affected)	—
unknown	zhukunpeng.chat-moss	all (affected), all (affected), all (affected), all (affected), all (affected), * (affected), all (affected), all (affected)	—