Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces

Summary

Wiz Research uncovered 550+ valid secrets across 500+ VSCode and Open VSX extensions — over a hundred enabled malicious updates — and worked with Microsoft on marketplace guardrails.
Published
Collected

original ↗

Related coverage

back