MAL-2026-2764

    Dashboard / Malicious Package / MAL-2026-2764

    MAL-2026-2764

    Published: 16 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in gemini-cli-vscode-ide-companion (npm)

    Details: Source: amazon-inspector (6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1) The package gemini-cli-vscode-ide-companion was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: gemini-cli-vscode-ide-companion

    Purl: pkg:npm/gemini-cli-vscode-ide-companion

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.9
    MAL-2026-2764 | CVE-DB