Tag

Vscode Extension

All articles tagged with #vscode extension

technology15 days ago•3 min saved

Malicious Solidity VS Code Extensions Steal Wallets and Keys

Cybersecurity researchers flagged malicious VS Code extensions named 'solidity-pro' that evolve from loader to information stealer, capable of harvesting browser profiles, crypto wallets, API keys, SSH keys, and Telegram bot tokens, exfiltrating data via a Telegram bot; they use obfuscation and delayed activation to evade detection, with similar incidents in the past. Users should remove the extensions, review dependencies, block known C2 domains, and monitor for risky command usage.

via The Hacker News|

#credentials #crypto-wallets #malware

security3 months ago•3 min saved

GitHub breach tied to poisoned VS Code extension hits thousands of internal repos

GitHub confirmed that a poisoned Visual Studio Code extension installed on an employee’s device led to the exfiltration of roughly 3,800 internal repositories; the malicious extension was removed from the VS Code Marketplace and the endpoint isolated, with incident response begun. Current assessment indicates only GitHub’s internal repositories were affected and there is no evidence that customer data outside the affected repos was compromised. The TeamPCP group has claimed access to about 4,000 repos on a cybercrime forum, though attribution remains unsettled. This follows a history of trojanized VS Code extensions used to steal code and credentials.

via BleepingComputer|

#data-exfiltration #github #internal-repositories