Mastodawn

Researchers Expose 73 Fake VS Code Extensions Spreading GlassWorm v2 Malware

Malicious VS Code extensions are putting developers at risk, with 73 fake extensions discovered spreading GlassWorm v2 malware, allowing attackers to stealthily retrieve and execute payloads after activation. These extensions act as loaders, using obfuscated JavaScript to achieve the same malicious…

https://osintsights.com/researchers-expose-73-fake-vs-code-extensions-spreading-glassworm-v2-malware?utm_source=mastodon&utm_medium=social

#MalwareOperations #GlasswormV2 #VsCodeExtensions #OpenVsx #InformationstealingCampaign

Researchers Expose 73 Fake VS Code Extensions Spreading GlassWorm v2 Malware

Discover 73 fake VS Code extensions spreading GlassWorm v2 malware and learn how to protect yourself - read the latest security research now.

OSINTSights

The DefendOps Diaries Nov 8

GlassWorm malware is evolving—using invisible code tricks to sneak into GitHub, NPM, and beyond. Could your favorite dev tools be next in its global pursuit? Read more to find out.

https://thedefendopsdiaries.com/glassworm-malware-campaign-expands-new-platforms-sophisticated-obfuscation-and-global-impact/

#glassworm
#malwarecampaign
#cybersecurity
#obfuscation
#vscodeextensions

GlassWorm Malware Campaign Expands: New Platforms, Sophisticated Obfuscation, and Global Impact

Explore how the GlassWorm malware campaign is evolving with new platforms, advanced obfuscation, and global impact on developers and users.

The DefendOps Diaries

N-gated Hacker News Jul 15, 2025

🚀 Oh, look, another ✨revolutionary✨ VS Code extension to make your filesystem feel like a text buffer! Because who doesn't dream of turning their entire OS into a glorified Notepad? 🙄 Meanwhile, #GitHub continues its relentless quest to automate every conceivable task, presumably so we can all just take a nap. 💤
https://github.com/ahrm/voil #VSCodeExtensions #Automation #TechHumor #DeveloperLife #HackerNews #ngated

GitHub - ahrm/voil

Contribute to ahrm/voil development by creating an account on GitHub.

GitHub

N-gated Hacker News Jun 19, 2025

🚀 Wow, another groundbreaking VS Code extension that allows you to share code snippets—because we all know copy-paste was just too hard! 😏 Apparently, it's the "ultimate" tool for boosting productivity, because who needs to write actual code when you can just share it effortlessly with this cutting-edge snippet sorcery? 🙄
https://snippetshare.dev #VSCodeExtensions #CodeSnippets #ProductivityTools #TechHumor #SoftwareDevelopment #HackerNews #ngated

SnippetShare

Rene Robichaud Apr 7, 2025

Malicious VSCode extensions infect Windows with cryptominers
https://www.bleepingcomputer.com/news/security/malicious-vscode-extensions-infect-windows-with-cryptominers/

#Infosec #Security #Cybersecurity #CeptBiro #VSCodeExtensions #Windows #Cryptominers

Malicious VSCode extensions infect Windows with cryptominers

Nine VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer to mine Ethereum and Monero.

BleepingComputer

iam-py-test

Mar 21, 2025

Just a friendly reminder to be careful when installing VSCode extensions: they can be - and sometimes are - malicious.
It is worth noting these extensions did not seem to be very successful.

https://web.archive.org/web/https://www.bleepingcomputer.com/news/security/vscode-extensions-found-downloading-early-stage-ransomware/

#VSCode #VSCodeExtensions #Ransomware #ahbanshiba #ahbancychelloworld

VSCode extensions found downloading early-stage ransomware

Two malicious VSCode Marketplace extensions were found deploying in-development ransomware from a remote server, exposing critical gaps in Microsoft's review process.

BleepingComputer

Winbuzzer Feb 7, 2025

Visual Studio Code 1.97 Improves GitHub Copilot Capabilities, Security, and UI - Here is what's new #Microsoft #VSCode #GitHubCopilot #AIcoding #Devs #VSCodeExtensions #ProgrammingTools #CodingLife

https://winbuzzer.com/2025/02/07/visual-studio-code-1-97-improves-github-copilot-capabilities-security-and-ui-xcxwbn/

Qirolab Jun 3, 2024

🔥 Spec Coder: Supercharge Your Coding with AI! (Features & AI Setup)
✓ AI Chat
✓ Autocomplete Your Code with AI
✓ Trigger manually Code Generation
✓ Unit Test Generation
✓ Docstring Generation
✓ Find Bugs
✓ Generate Commit Messages

👉 https://www.youtube.com/watch?v=88CTOA7jL4s

#AI #AIforCoding #CodingTutorial #DeveloperTools #vscode #vscodeextensions #Copilot #GitHubCopilot #HuggingFace #Ollama #OpenAI #ChatGPT #GPT #Gemini #GeminiPro #GPT4 #gpt4o #programming #100DaysOfCode #freeCodeCamp #CodeNewbies