North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The ...
Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing ...
Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer ...
Two VSCode extensions are harvesting sensitive data and sending it to China.
These need to be uninstalled manually ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results