News for hackers. Stuff that matters.

A comment on GitHub confirms breach of 3,800 repos via malicious VSCode extension. Parent comment

Re:GitHub confirms breach of 3,800 repos via malicious VSCod... by Lyrkan on Wednesday May 20, 2026 @09:28PM (#48216672)
I think I checked a few weeks ago and whatwedo.twig was not on OpenVSX at that time, so I'm suspecting it is a case of name-squatting.

This seems to be confirmed here: https://socket.dev/openvsx/package/whatwedo.twig/versions/1....

[ Parent | on HN ]

There are no comments on this comment yet.