SECURITYBLEEPING COMPUTER
77 Open VSX extensions found harvesting developer info
77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed.
Mentioned
Related Signal
Adjacent reporting
- Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware
- Fresh Wave of GlassWorm VS Code Extensions Slices Through Supply Chain
- Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
- GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions
- GitHub says internal repositories were taken in poisoned VS Code extension attack
- GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs