Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces
Summary
Wiz Research uncovered 550+ valid secrets across 500+ VSCode and Open VSX extensions — over a hundred enabled malicious updates — and worked with Microsoft on marketplace guardrails.
- Published
- Collected
Skip to content