Malicious VSCode extensions with more than 45K downloads steal PII and enable backdoors

Highlights: CloudGuard Spectrals detected malicious extensions on the VSCode marketplace Users installing these extensions were enabling attackers to steal PII records and to set remote shell to their machines Once detected, we’ve alerted VSCode on these extensions. Soon after notification, they were removed by the VSCode marketplace team. VSCode (short for Visual Studio Code) is a popular and free source code editor developed by Microsoft. It’s an efficient and customizable coding environment that can support a wide range of programming languages, frameworks, and tools. VSCode has gained much popularity in recent years and has become one of developers’ most popular […]

The post Malicious VSCode extensions with more than 45K downloads steal PII and enable backdoors appeared first on Check Point Blog.

This article has been indexed from Check Point Blog

Read the original article: