VS Code

788 readers

2 users here now

founded 1 year ago

MODERATORS

Ategon@programming.dev

Lodra@programming.dev

Malicious VSCode extensions with millions of installs discovered (www.bleepingcomputer.com)

submitted 5 months ago by neme@lemm.ee to c/vscode@programming.dev

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] KazuyaDarklight@lemmy.world 14 points 5 months ago (1 children)

"A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official theme to include risky code. Further research into the VSCode Marketplace found thousands of extensions with millions of installs."

[–] towerful@programming.dev 2 points 5 months ago

The plugin is called "Darcula Official" btw.

There is a more generic theme (for multiple applications) called Dracula.
JetBrains IDE has a theme called Darcula, and there are vscode themes on the marketplace that implement this.

So, it's more than just a typosquat