Hosted on MSN1mon
VSCode extensions pulled over security risks, but millions of users have already installed
Security researchers found malicious code hiding in two VSCode extensions Microsoft quickly ... there was “heavily obfuscated JavaScript, which is always a red flag in open-source software.” ...
Bleeping Computer16d
VSCode extensions found downloading early-stage ransomware
While VSCode themes should not be using obfuscated JavaScript, the Material Theme – Free' and 'Material Theme Icons – Free' extensions were later proven not to be malicious. Microsoft ...