Skip to content
fast-draft Open VSX Extension Compromised by BlokTrooper
aikido.dev | blog | #supply-chain | #malware | #infostealer | #supply-chain-security | #vscode-extensions | #open-vsx | #rat
Summary
Multiple fast-draft releases on Open VSX fetched a GitHub-hosted downloader that delivered a RAT and infostealer. The alternating clean and malicious versions suggest a stolen publisher token.
- Published
- Collected