1. fast-draft Open VSX Extension Compromised by BlokTrooper blog | 2026-03-18 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #infostealer
2. The Return of the Invisible Threat: Hidden PUA Unicode Hits GitHub repositorties blog | 2025-10-31 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #github
3. Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces blog | 2025-10-15 12:00 | wiz.io | original ↗ | #supply-chain | #secrets | #marketplace