Obsidian plugin was abused to deploy a remote access trojan

Re:Obsidian plugin was abused to deploy a remote access trojan by sneilan1 on Monday May 11, 2026 @12:01PM (#48096779)

I've been using obsidian for years as a paying customer. Will continue to pay as price point is good and it just works. However, unless plugin security massively improves I will never install any plugins.

[ Parent | on HN ]

Re:Obsidian plugin was abused to deploy a remote access trojan by kepano on Monday May 11, 2026 @12:30PM (#48097206)

Obsidian is only seven people but we are working on this from all three angles:

1. Make community plugins less necessary over time as basic features become part of core

2. Improve the security of community plugins

3. Make it easy to create your own plugins that you can fully trust, e.g. with the recent release of Obsidian CLI

[ Parent | on HN ]

Re:Obsidian plugin was abused to deploy a remote access trojan by sharps1 on Monday May 11, 2026 @08:18PM (#48102547)

If you can build in one thing, I'd pick something equivalent to Omnisearch. That makes it much easier to find things. I always struggle with the default search.

[ Parent | on HN ]

Re:Obsidian plugin was abused to deploy a remote access trojan by wolvoleo on Monday May 11, 2026 @09:08PM (#48102931)

True the default search is really good at not bringing up what I'm looking for. It's the #1 improvement point for me.

[ Parent | on HN ]