Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing ...
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS ...
A new campaign involving malicious Visual Studio Code (VS Code) extensions has exposed a loophole in the VS Code Marketplace that allows threat actors to reuse names of previously removed packages.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback