A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.