/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR ▲
TEXXR

Chronicles

The story behind the story

← → days · ↑ ↓ browse · Enter similar · o open

Researchers find malicious Microsoft Visual Studio Code extensions with millions of installs, and also easily create their own, which trended in the marketplace

A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to “infect” …

BleepingComputer Bill Toulas

Related Coverage

Discussion

  • @dangillmor@mastodon.social Dan Gillmor on mastodon
    Microsoft security is too often an oxymoron.  Latest example:  —  “Microsoft's lack of stringent controls and code reviewing mechanisms on the VSCode Marketplace allows threat actors to perform rampant abuse of the platform, with it getting worse as the platform is increasingly u…
  • r/technology r on reddit
    Malicious VSCode extensions with millions of installs discovered.