Malicious Ransomware Extensions Found on Microsoft VS Code Marketplace

A ransomware-style extension named susvsex, created with basic capabilities and labeled as 'vibe-coded,' was discovered on Microsoft's official VS Code marketplace. The extension, published by 'suspublisher18,' openly advertised its malicious functionality, raising concerns about security in the marketplace. Researcher John Tuckner from Secure Annex identified the extension, noting its lack of sophistication and accidental inclusion of command and control server code.