Fake VS Code Extension on NPM Spreads Multi-Stage Malware

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by bolognafairy on Monday February 10, 2025 @06:08PM (#43006472)

This is an ironic statement, right? Because you’re mindlessly parroting a copy of a copy of what was once, probably, an intelligent and appropriately nuanced take? And because you’re attributing this to the “JS ecosystem” when supply chain attacks are common in many different ecosystems?

LLM-ass comment.

[ Parent | on HN ]

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by elaus on Tuesday February 11, 2025 @03:01AM (#43010196)

Worst of all: the article never explains what npm has to do with it. Vscode extensions are not installed via npm, so at least part of the malware depends on the Vscode extension store.

[ Parent | on HN ]