The coordinated campaign abuses Visual Studio Code and OpenVSX extensions to steal code, mine cryptocurrency, and maintain ...
New research has uncovered that publishers of over 100 Visual Studio Code (VS Code) extensions leaked access tokens that could be exploited by bad actors to update the extensions, posing a critical ...
There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to ...
A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft's Visual ...