News for hackers. Stuff that matters.

A comment on VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads. Parent comment

Re:VSCode Security: Malicious Extensions Detected- More Than... by Gigachad on Monday May 22, 2023 @08:38AM (#36030639)
Are VSCode users really that much more diligent? Are you auditing the source code for every extension you install? Do you even know if the github source is the same as whats hosted on the plugins repo?

The only real solution I can see is only installing plugins from large trusted entities.

[ Parent | on HN ]
Re:VSCode Security: Malicious Extensions Detected- More Than... by explaininjs on Monday May 22, 2023 @10:11AM (#36031677)
For sketch extensions, download the vsix from the marketplace and extract it (it’s just a zip), then inspect that and load it.
[ Parent | on HN ]