Developing2 outlets · over 15 hours
77 Open VSX extensions found harvesting developer info
Manifold Security found 77 Open VSX extensions impersonating legitimate developer tools and exfiltrating system, Git, and CI metadata to mangorbit[.]com. Removed by August 3, 2026, 19 of the packages collected detailed reconnaissance data, while 58 sent hostnames. The campaign ran from July 26 to August 1, 2026.
The story so far2 updates, latest first.
Tracked by ByteBrief