DevBleepingComputerabout 3 hours ago
77 Open VSX extensions found harvesting developer info
1 min read
Manifold Security found 77 Open VSX extensions impersonating legitimate tools and exfiltrating system, Git, and CI metadata to mangorbit[.]com. Nineteen collected extensive reconnaissance data, while 58 sent hostnames. The packages were removed from Open VSX by August 3, 2026, but require manual removal from developer systems.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
