Security Alert: 19 Fake PNG Extensions Found in VS Code Marketplace

Gbhackers •Mayura Kathir • December 11, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

19 Malicious VS Code Extensions Disguised as PNG Files Detected ReversingLabs identified 19 malicious Visual Studio Code extensions that conceal trojans within fake PNG files. Developers using these extensions are at risk of malware infection through a popular dependency. The extensions were found in the VS Code Marketplace, prompting a security alert for users. 2 sources 38

Security Alert: 19 Fake PNG Extensions Found in VS Code Marketplace

The full story

Extracted Entities

Attack Types (1)

Platforms (1)