Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
Benign add-ons can be weaponized with malicious updates after gaining user trust.
According to researchers at cybersecurity firm Koi, a China-based hacking syndicate known as ShadyPanda is actively ...
A threat actor has published over a hundred malicious extensions that can track and profile Chrome and Microsoft Edge users ...
Cybersecurity firm Socket warns the extension masks a second transaction instruction that quietly skims SOL from routine ...
One-Click Publishing Eliminates the Gap Between AI Code Generation and Live Deployment San Francisco, CA – November 26, 2025 ...
The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...
Once-trusted Chrome and Edge add-ons have quietly turned into tools for data harvesting, search manipulation, and a ...
The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback