Threat actors continue to probe Visual Studio Code's extension ecosystem, and a late November incident shows how quickly a trusted developer tool can be turned into a supply chain beachhead. In a ...

Mac users often assume they're safer than everyone else, especially when they stick to official app stores and trusted tools. That sense of security is exactly what attackers like to exploit. Security ...

GlassWorm malware campaign expanded from VS Code Marketplace to Open VSX Four compromised extensions delivered macOS infostealer stealing browser data, wallets, and keychain info Extensions downloaded ...

GlassWorm malware campaign expanded from VS Code Marketplace to Open VSX Four compromised extensions delivered macOS infostealer stealing browser data, wallets, and keychain info Extensions downloaded ...

Hackers are using a novel technique that abuses extended attributes for macOS files to deliver a new trojan that researchers call RustyAttr. The threat actor is hiding malicious code in custom file ...

For a few days now, a supply chain attack has been running through the Visual Studio Code marketplaces. Both Microsoft's Marketplace and the alternative Open-VSX marketplace of the Eclipse Foundation ...