The coordinated campaign abuses Visual Studio Code and OpenVSX extensions to steal code, mine cryptocurrency, and maintain ...
There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to ...
New research has uncovered that publishers of over 100 Visual Studio Code (VS Code) extensions leaked access tokens that ...
A new and ongoing supply-chain attack is targeting developers on the OpenVSX and Microsoft Visual Studio marketplaces with ...
A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft's Visual ...
Moderne, a company that provides solutions to help modernize code, announced that its Lossless Semantic Tree (LST) code model ...