VS Code extensions

Tool

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 6, 2025

Last Seen

November 13, 2025

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (4)

Ransomware Deployment via VS Code Extensions and GitHub C2 Exploited

Nov 6·2 sources

Rogue MCP Servers Exploit Vulnerability in Cursor Code Editor

Nov 17·2 sources

Ransomware Deployment via VS Code Extensions and GitHub C2 Exploited by Threat Actors

Nov 6·2 sources

Rogue MCP Servers Exploit Vulnerability in Cursor's Internal Browser

Nov 17·2 sources

Related Articles (2)

Rogue MCP servers can take over Cursor’s built

Csoonline·Nov 13

Threat Actors May Abuse VS Code Extensions to Deploy Ransomware and Use GitHub as C2 Server

Cybersecuritynews·Nov 6

Related Entities

Ransomware Worm Phishing Cursor GitHub Blink Cursor IDE Electron OpenVSX Registry Visual Studio Code Windsurf Chrome