#vs-code-extensions

Glassworm Campaign Plants 73 Malicious VS Code Extensions

Researchers discovered 73 malicious Visual Studio Code extensions in OpenVSX that activate after updates to steal sensitive data.

Open VSX Registry Bug Let Malicious VS Code Extensions Bypass Security

Open VSX's pre-publish scanning pipeline contained a critical flaw that allowed malicious Visual Studio Code extensions to bypass security vetting and reach the registry.