Back
Bharath Varma
•
Google • 1y
Malicious VSCode Extensions with Millions of Installs Discovered A group of Israeli researchers uncovered security vulnerabilities in the Visual Studio Code (VSCode) Marketplace by creating a fake extension called "Darcula," which mimicked the popular "Dracula Official" theme. The malicious extension, designed to collect system information, was installed by over 100 organizations, including major companies and a national court network. This experiment highlights the significant security risks within the VSCode Marketplace, where thousands of extensions with millions of installs have been found to contain risky or malicious code. The researchers call for more stringent controls and code reviews by Microsoft to mitigate these threats. Source ( bleepingcomputer ) found it interesting Follow for more !!
Replies (4)
More like this
Recommendations from Medial
Archisman Midya
CS Undergrad at Scal... • 1y
Google’s Project IDX Could Be a Game Changer for Developers Today, I explored Google’s Project IDX and why it might be better than Visual Studio Code (VSCode). Project IDX is a cloud-based coding tool, meaning you can use it from any device, anywhere
See More
Download the medial app to read full posts, comements and news.