Material Theme has been pulled from VS Code's marketplace

Post by fennecfoxy » Wed, Mar 05, 2025, 1:46 PM UTC

vlovich123 wrote: post #293

isidorn wrote: post #79

Hi - Isidor here from the VS Code team. A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us. Our security researchers at Microsoft confirmed this claims and found additional suspicious code. We banned the publisher from the VS Marketplace and removed all of their extensions and uninstalled from all VS Code instance…

Help me square this circle: > A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us. > As a reminder, the VS Marketplace continuously invests in security If you’re relying on the community to alert you to the issues in the marketplace, perhaps you’re not investing enough in auditing popular extensions yourself? I wou…

Post by josekbono » Mon, Mar 10, 2025, 11:00 AM UTC

registeredcorn wrote: post #394

isidorn wrote: post #158

Earlier quoted context omitted.

Thank you for letting us know. We are investigating.

Any update on this? I am not directly impacted, but am unsure about others in my company. Assuming that they may be: * Any specifics on the (potential) impact for affected users? * What they should do to get it removed? Edit: There does seem to be a little bit more information available over at Bleeping Computer[1], but the precise nature of what the malware does is unclear at this time other than that it may be some…