Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware
by groby_b on Monday February 10, 2025 @05:20PM
(#43006045)
The theory is defense-in-depth. It's dubious if it buys you much, but any malware now needs a container escape and a VM escape.
In reality, if it's target malware, it will, and if it's a mass-spray like a simple VSCode extension, it won't have either. (Nigerian Prince theory: You don't want to deal with the security-conscious people for a mass-attack)
In reality, if it's target malware, it will, and if it's a mass-spray like a simple VSCode extension, it won't have either. (Nigerian Prince theory: You don't want to deal with the security-conscious people for a mass-attack)