First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code

Re:First Self-Propagating Worm Using Invisible Code Hits Ope... by gary_0 on Monday October 20, 2025 @04:45PM (#45649114)

If all you're interested in is which extensions have been infected:

Compromised OpenVSX Extensions:

    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]
    [email protected]

Compromised Microsoft VSCode Extensions:

    [email protected]

[ Parent | on HN ]

Re:First Self-Propagating Worm Using Invisible Code Hits Ope... by wasabi991011 on Monday October 20, 2025 @07:04PM (#45650538)

Important note, the most common vscode extension for Cline is saoudrizwan.claude-dev, not cline-ai-main.cline-ai-agent.

I was freaking out for a bit.

[ Parent | on HN ]

Re:First Self-Propagating Worm Using Invisible Code Hits Ope... by benxh on Monday October 20, 2025 @06:54PM (#45650461)

cline is used by a lot of devs

[ Parent | on HN ]

Re:First Self-Propagating Worm Using Invisible Code Hits Ope... by wasabi991011 on Monday October 20, 2025 @07:05PM (#45650548)

Yeah I was freaking out, but turns out it's not the usual Cline extension (which has extension is saoudrizwan.claude-dev).

[ Parent | on HN ]