Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors publish malicious packages under those names. The problem, according to Koi, is that these
source https://thehackernews.com/2026/01/vs-code-forks-recommend-missing.html
Tuesday, January 6, 2026
VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box