77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data

Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.
MUO on MSN

These open-source browser extensions are the first things I install on any new machine

Your browser is only as good as the extensions running in it.

77 Open VSX extensions found harvesting developer info

Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development ...
The Hacker News

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems. Threat ...
PCMag on MSN

Warning: Your old browser extensions may be secretly exposing your data

A bad browser extension can be a security nightmare. If it's been hijacked by a bad actor, your personal data may be at risk.