Malicious VSCode extensions with installs discovered
bleepingcomputer.com
Malicious VSCode extensions with installs discovered
1–10 of 15 posts
Re: Malicious VSCode extensions with installs discovered
#2Jeez, what a disaster. More and more it’s becoming clear that you cannot actually trust anyone else’s code unless you audit it yourself.
Re: Malicious VSCode extensions with installs discovered
#3Jeez, what a disaster. More and more it’s becoming clear that you cannot actually trust anyone else’s code unless you audit it yourself.
How can we live like this?
Re: Malicious VSCode extensions with installs discovered
#4Strange that they use an example with a 192.168 address and say that it’s connecting to a cybercriminal’s server
Re: Malicious VSCode extensions with installs discovered
#5Strange that they use an example with a 192.168 address and say that it’s connecting to a cybercriminal’s server
Seems to be taken from https://medium.com/@amitassaraf/2-6-exposing-malicious-exten.... I doubt the writer of this article knows of any technical details and just carried over the mistake
Re: Malicious VSCode extensions with installs discovered
#6> 1,283 with known malicious code (229 million installs)
Not expecting that many.
I sometimes randomly try interesting extensions out. Will not do this again. Should only install extensions recommended by Microsoft I guess.
Maybe the same applies for browser extensions?
Re: Malicious VSCode extensions with installs discovered
#7Jeez, what a disaster. More and more it’s becoming clear that you cannot actually trust anyone else’s code unless you audit it yourself.
How can we live like this?
Nothing dependent on an honor system lasts long (in the US at least). Some bonehead always ruins the nice thing! Life with the inevitable bad actor is worse for everyone… but we manage.
Re: Malicious VSCode extensions with installs discovered
#8Actual Medium post as shared here by the creator of the fake VSCode Extension:
We Hacked Multi-Billion $ Companies in 30 Minutes with a VSCode Extension
https://medium.com/@amitassaraf/the-story-of-extensiontotal-...
Re: Malicious VSCode extensions with installs discovered
#9Jeez, what a disaster. More and more it’s becoming clear that you cannot actually trust anyone else’s code unless you audit it yourself.
How can we live like this?
What's old is new again.
Re: Malicious VSCode extensions with installs discovered
#10> 1,283 with known malicious code (229 million installs) Not expecting that many. I sometimes randomly try interesting extensions out. Will not do this again. Should only install extensions recommended by Microsoft I guess. Maybe the same applies for browser extensions?
Please don't be a dev with access to things my security depends on.