Microsoft Visual Studio Marketplace is Microsoft's official extension marketplace for Visual Studio and Visual Studio Code ecosystems.
Overview
Microsoft Visual Studio Marketplace is Microsoft's official extension marketplace for Visual Studio and Visual Studio Code ecosystems. It serves as a central distribution channel for third-party extensions and has become a notable attack surface for extension- and supply-chain–based threats, evidenced by reports of malicious packages and compromised forks targeting the platform.
Related Threat Clusters
-
New GlassWorm Malware Targets macOS Developers with Trojanized Crypto Wallets
A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in…
7 articles · Updated January 1, 2026 -
GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak
The Open VSX registry faced a supply chain attack after access tokens were leaked, allowing threat actors to publish malicious extensions. The GlassWorm malware campaign has returned with new extensions targeting…
15 articles · Updated November 11, 2025 -
Malicious Extension Risks in AI-Powered VSCode Forks
AI-powered IDEs like Cursor, Windsurf, Google Antigravity, and Trae recommend extensions that do not exist in the OpenVSX registry. This allows threat actors to claim the namespace and upload malicious extensions,…
3 articles · Updated January 5, 2026
Recent Intelligence Reports
- VSCode IDE forks expose users to "recommended extension" attacks — Bleepingcomputer · January 5, 2026
- New GlassWorm malware wave targets Macs with trojanized crypto wallets — Bleepingcomputer · January 1, 2026
- Glassworm Malware Hits OpenVSX and Microsoft Visual Studio Platforms with 24 New Packages — Cybersecuritynews · December 2, 2025