Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools while sending data to the same newly registered domain. Nineteen collected detailed information about developer machines, Git repositories, and CI/CD environments.
The extensions had been removed from Open VSX by Aug. 3, but copies already installed on developer machines or baked into development images can remain, while workspace configurations may continue to reference the affected package names. Automated provisioning increases the risk because Open VSX and Microsoft’s marketplace maintain…
Read the full article at TECHREPUBLIC.COM
