this post was submitted on 01 Mar 2025
24 points (100.0% liked)

VS Code

867 readers
2 users here now

founded 2 years ago
MODERATORS
Ategon@programming.dev
Lodra@programming.dev
24
VSCode extensions with 9 million installs pulled over security risks (www.bleepingcomputer.com)
submitted 1 week ago* (last edited 1 week ago) by neme@lemm.ee to c/vscode@programming.dev
10 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] FizzyOrange@programming.dev 3 points 1 week ago

There must be dozens of malicious extensions. I'm honestly surprised we haven't seen it more. Chrome extensions get sold to shady people all the time; I would have thought VSCode extensions are even higher value targets.