Open VSX Registry Patches Security Flaw After Token Leak and Malicious Extensions Found

Cyberpress • November 4, 2025

Exclusive Cyber Security News platform that provide in-depth analysis Cyber Attacks, Malware infection, Data breaches, Vulnerabilities, New researches & other Cyber stories. Us: [email protected]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Open VSX Registry Faces Security Incident with Leaked Tokens and Malicious Extensions The Open VSX registry experienced a security incident where access tokens were leaked by developers in public repositories. This exposure allowed threat actors to publish malicious extensions, affecting projects with significant user bases, including those with 150,000 downloads. The leak was identified by Wiz researchers, prompting the registry to rotate the compromised tokens. 4 sources 28

Open VSX Registry Patches Security Flaw After Token Leak and Malicious Extensions Found

The full story

Extracted Entities

Attack Types (2)

Companies (1)