Seventy-seven lookalike Open VSX packages show how trusted add-ons can become a low-friction way to collect environment intelligence from developer machines.
Rogue Visual Studio Code add-ons have infiltrated Microsoft’s trusted ecosystem, planting sophisticated infostealers on unsuspecting developers’ machines.