77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data

Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.
MUO on MSN

These open-source browser extensions are the first things I install on any new machine

Your browser is only as good as the extensions running in it.

77 Open VSX extensions found harvesting developer info

Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development ...
The Next Web

Bloom Security’s Extension Resurrection research exposes a blind spot in developer security

Bloom Security found that 677 VS Code Marketplace extension packs and 94 Open VSX packs contained references to extensions that did not exist, creating a supply-chain attack path through trusted ...
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems. Threat ...