Open VSX Marketplace Extensions is an open-source marketplace for Visual Studio Code extensions.
Open VSX Marketplace Extensions is an open-source marketplace for Visual Studio Code extensions. Because extensions can execute code within the host IDE, this platform constitutes a potential cybersecurity risk surface where malicious or compromised extensions could be published to harvest data, deliver payloads, or seed intrusions, making publisher vetting and permission controls critical.
A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in…