Dossier
extensions
Coverage of extensions in the Nexus archive.
- 77 Open VSX extensions found harvesting developer info
77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed.
- macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets
A macOS ClickFix campaign uses AppleScript-based infostealers to steal credentials and session cookies from 14 browsers, 16 cryptocurrency wallets, and over 200 extensions. The attack targets macOS users, harvesting sensitive data including browser sessions and cryptocurrency information.