19 Malicious VS Code Extensions Disguised as PNG Files Detected

19 Malicious VS Code Extensions Disguised as PNG Files Detected

First seen 11 Dec 2025, 18:52 UTC •GbhackersHackread •78% similarity •37.6

Article Content

Browse articles
ThreatCluster

ReversingLabs identified 19 malicious Visual Studio Code extensions that conceal trojans within fake PNG files. Developers using these extensions are at risk of malware infection through a popular dependency. The extensions were found in the VS Code Marketplace, prompting a security alert for users.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Visual Studio Code VS Code Marketplace