77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools while sending data to the same newly registered domain. Nineteen collected detailed information about developer machines, Git repositories, and CI/CD environments. The extensions had been removed from Open VSX by Aug. 3, but copies already…
