News for hackers. Stuff that matters.

A comment on Material Theme has been pulled from VS Code's marketplace. Parent comment

Re:Material Theme has been pulled from VS Code's marketplace by flutas on Wednesday February 26, 2025 @10:36AM (#43184630)
The extension file is still available to download directly from MS.[0]

I downloaded the file, and unzipped it, but on a cursory glance I only see obfuscated code nothing malicious.

[0]: !!!WARNING MAY BE MALICIOUS!!! https://marketplace.visualstudio.com/_apis/public/gallery/pu...

[ Parent | on HN ]
Re:Material Theme has been pulled from VS Code's marketplace by HelloNurse on Thursday February 27, 2025 @09:46AM (#43194818)
Obfuscated code is malicious, even in case it's harmless.
[ Parent | on HN ]
Re:Material Theme has been pulled from VS Code's marketplace by flutas on Friday February 28, 2025 @03:58PM (#43210705)
Then never download an Android app, they're obfuscated by default.
[ Parent | on HN ]
Re:Material Theme has been pulled from VS Code's marketplace by HelloNurse on Monday March 03, 2025 @03:57AM (#43239781)
Obfuscating Javascript is entirely unnecessary: it signals that the author thinks that they have something to hide.

At the very least, the author has delusional notions about the greatness of their source code and they worry about piracy, meaning that there is a high probability of stupid bugs and that they would be difficult to notice because of the obfuscation.

Of course in this case the default assumption should be that there is something malicious to hide.

[ Parent | on HN ]