Tracked topic
… For instance, last year, VSCode extensions with 9 million installs were pulled over security risks , and 10 more, posing as legitimate development tools, infected users with the XMRig cryptominer . …
… And as I outlined in the article, I really don't want to deal with MSRC on VSCode bugs," he added . "To summarize the last time I interacted with MSRC regarding reporting a VSCode bug , it was a horrible experience where they silently fixed 'the bug I pointed out without any credit. …
… Two days after the attack, our analytics have registered approximately 6000 extension activations from VSCode and 0 from other editors including VSCode forks like Cursor ." In recent years, multiple other malicious VS Code extensions with millions of installs have snuck on the official VS Code mark… …
… Using credentials stolen in the Trivy attack, the hackers published modified versions of multiple developer tools on GitHub, Docker, and VSCode that included info-stealing code. …
… Download Now Related Articles: GitHub confirms breach of 3,800 repos via malicious VSCode extension Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet Ukraine identifies infostealer operator tied to 28,000 stolen accounts GitHub investigates internal repositories breach claimed b… …
… Download Now Related Articles: FBI warns of in-person data theft attacks from extortion gang 7-Eleven confirms data breach claimed by the ShinyHunters gang GitHub confirms breach of 3,800 repos via malicious VSCode extension Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet GitH… …
… Download Now Related Articles: GitHub confirms breach of 3,800 repos via malicious VSCode extension 7-Eleven confirms data breach claimed by the ShinyHunters gang Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confirms sec… …
… Google downgrades its two Google's response to the two Antigravity findings, a macOS Seatbelt denylist bypass and a .vscode task-config bypass of its Secure Mode, was cooler. …