← Back to Feed
77 Open VSX extensions found harvesting developer info
August 4, 2026 · BleepingComputer · Severity: MEDIUM
This article reports that 77 extensions on the Open VSX marketplace were found impersonating legitimate developer tools. These malicious extensions harvested information about the systems and development environments where they were installed.
Key Takeaways
- 77 malicious extensions on Open VSX impersonated legitimate developer tools.
- Extensions transmitted system and development environment information from infected machines.
- Developers should verify extensions before installation to avoid data theft.