Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Two VSCode extensions are harvesting sensitive data and sending it to China.
Hosted on MSN
VSCode extensions pulled over security risks, but millions of users have already installed
Security researchers found malicious code hiding in two VSCode extensions Microsoft quickly pulled them and notifies users The developer criticized Microsoft's move, saying they were never consulted ...
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to China-based servers.
Two malicious VSCode Marketplace extensions were found deploying in-development ransomware, exposing critical gaps in Microsoft's review process. The extensions, named "ahban.shiba" and ...
The coordinated campaign abuses Visual Studio Code and OpenVSX extensions to steal code, mine cryptocurrency, and maintain remote control, all while posing as legitimate developer tools. In a new ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results