Visual Studio Code Marketplace is the official distribution hub for VSCode extensions managed by Microsoft.
Visual Studio Code Marketplace is the official distribution hub for VSCode extensions managed by Microsoft. It enables developers to extend VSCode functionality but also represents a broad software supply-chain surface that attackers can abuse to deliver malicious extensions. Recent findings show threat actors using the marketplace to drop infostealer payloads, underscoring cybersecurity risks associated with extension ecosystems.
A resurgence of the GlassWorm malware campaign has been identified, targeting the OpenVSX ecosystem with 73 'sleeper' extensions that become malicious after updates. Six of these extensions have already been activated…
On May 18, 2026, a compromised version of the Nx Console VS Code extension was uploaded to the Visual Studio Code Marketplace, targeting developer credentials and cloud infrastructure tokens. This attack exploited…
Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, were found on the VS Code marketplace, capable of stealing screenshots, browser sessions, and stored credentials. The extensions were reported by…