DevThe Hacker Newsabout 3 hours ago
Open VSX Removes 77 Malicious Evil Twin Extensions
1 min read
Open VSX removed 77 evil twin extensions that impersonated legitimate tools and exfiltrated developer data to mangorbit[.]com. The packages, uploaded between July 26 and August 1, 2026, sent hostnames and detailed system information. Nineteen variants collected workspace, editor, and CI environment details.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
