National Cyber Warfare Foundation (NCWF)

12 Malicious Extensions in VSCode Marketplace Steal Source Code and Exfiltrate Login Credentials


0 user ratings
2025-10-30 07:36:37
milo
Red Team (CNA)

The VSCode extension marketplace has become a critical vulnerability in the software supply chain. Security researchers at HelixGuard Team recently discovered 12 malicious extensions operating within the Microsoft VSCode Marketplace and OpenVSX, with four remaining active despite their detection. These extensions employ sophisticated techniques to steal source code, exfiltrate sensitive credentials, establish remote backdoors, and […]


The post 12 Malicious Extensions in VSCode Marketplace Steal Source Code and Exfiltrate Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.



Mayura Kathir

Source: gbHackers
Source Link: https://gbhackers.com/vscode-marketplace/


Comments
new comment
Nobody has commented yet. Will you be the first?
 
Forum
Red Team (CNA)



Copyright 2012 through 2025 - National Cyber Warfare Foundation - All rights reserved worldwide.