Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor covert functionality to siphon developer data to China-based servers. The extensions, which have 1.5 million combined installs and are still available for download from the official Visual Studio
source https://thehackernews.com/2026/01/malicious-vs-code-ai-extensions-with-15.html
Monday, January 26, 2026
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box