A wave of counterfeit Open VSX extensions has exposed how easily a familiar developer tool can become a data collection channel. Seventy-seven packages copied the names, namespaces, and descriptions of legitimate extensions, then contacted the same newly registered domain. The campaign appeared between July 26 and August 1, 2026. Most packages sent basic device details, but 19 contained a far more intrusive reconnaissance routine that collected repository and continuous integration information from developer workstations and build environments. Researchers at Manifold identified the operation and found that the packages were published by accounts unrelated to extension authors. Manifold said in a report shared with Cyber...
Read the full article at the source.
Comments (0)
No comments yet. Be the first to comment!