VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads

Re:VSCode Security: Malicious Extensions Detected- More Than... by ianzakalwe on Monday May 22, 2023 @11:15AM (#36032536)

Actually malicious extension only had 250 downloads, 45k installs extension was sending telemetry only. It’s a very misleading title collapsing two separate incidents into one for the sake of dramatization.

This article also highlighted that automated tools used by VS team are pretty good at catching most of similar issues.

[ Parent | on HN ]

Re:VSCode Security: Malicious Extensions Detected- More Than... by newaccount74 on Tuesday May 23, 2023 @03:11AM (#36040936)

Tracking your host name is not telemetry, it's definitely spyware.

[ Parent | on HN ]

Re:VSCode Security: Malicious Extensions Detected- More Than... by scotty79 on Tuesday May 23, 2023 @04:48AM (#36041625)

Still, it's not nearly on the same level as exfiltrating secrets.

[ Parent | on HN ]

Re:VSCode Security: Malicious Extensions Detected- More Than... by cywick on Tuesday May 23, 2023 @07:27AM (#36042776)

Exactly. Typically, exfiltrating this kind of information is only the first step. Once enough high value targets are caught in this net, the actual malware is deployed.

[ Parent | on HN ]