1.fast-draft Open VSX Extension Compromised by BlokTrooperblog | 2026-03-18 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #infostealer
2.The Return of the Invisible Threat: Hidden PUA Unicode Hits GitHub repositortiesblog | 2025-10-31 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #github
3.Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplacesblog | 2025-10-15 12:00 | wiz.io | Original ↗ | .md | #supply-chain | #secrets | #marketplace