Tag: open vsx
3 articles
Fake Open VSX Extensions Harvest Private Data from Impersonated Developer Tools
Beware of fake Open VSX extensions that are impersonating real developer tools, harvesting private data and beaming it to a mysterious domain. These 77 counterfeit Visual Studio Code extensions were cleverly disguised with familiar names and namespaces, but were actually controlled by scammers.
Open VSX Eradicates Malicious Extensions Exfiltrating Developer Data
A shocking discovery by Manifold Security revealed that 77 malicious extensions on Open VSX were secretly siphoning off sensitive data from developers' machines between July 26 and August 1, 2026. These fake extensions, masquerading as legitimate tools, were swiftly removed by Open VSX on August 3, 2026.
Researchers Expose 73 Fake VS Code Extensions Spreading GlassWorm v2 Malware
Malicious VS Code extensions are putting developers at risk, with 73 fake extensions discovered spreading GlassWorm v2 malware, allowing attackers to stealthily retrieve and execute payloads after activation. These extensions act as loaders, using obfuscated JavaScript to achieve the same malicious outcomes as their binary-based counterparts.