Malicious extensions in Chrome Web store steal user credentials

Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user ...

MegaLag has returned a year later with part two of his video series investigating the Honey extension.

Beyond part one’s exposure of affiliate revenue hijacking, MegaLag digs into Honey’s “extortion” by adding limited-use “friends and family” type discounts and lying to the store owners about never ...
How-To Geek on MSN

I ditched VS Code for Google’s Antigravity, and I’m not going back

In February, the Trump administration barred AP reporters and photographers from covering White House events for not obeying the president’s executive order renaming the Gulf of Mexico to the Gulf of ...
IEEE

CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions

Abstract: Scripting languages like Python or JavaScript are extremely popular among developers, in part due to their massive open-source ecosystems that enable smooth code reuse. However, recent work ...
Infosecurity Magazine

Malware Discovered in 19 Visual Studio Code Extensions

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...
cybernews

New malware on Microsoft Marketplace steals passwords and screenshots of desktops

Some developers thought they were installing a dark theme and an AI assistant on their VS Code. However, it turned out to be malware that stole their data. Researchers at Koi, a cybersecurity firm, ...
The Hacker News

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware. The VS Code ...
GitHub

Improve bootstrap extension experience when using Profiles

Users may miss out on bootstrapped extensions if they are using Profiles and haven't configured the Profile to inherit all extensions from the Default profile. See discussion: #10900 (reply in thread) ...
The Hacker News

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools ...
Bleeping Computer

Glassworm malware returns in third wave of malicious VS Code packages

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...
GitHub

ran-codes/code-organizer-vscode

Transform your code files into organized, navigable documents with a table of contents-like structure. Create sections using simple comments, then use VS Code's built-in Outline panel to view and ...