researchers-find-vs-code-flaw-allowing-attackers-to-republish-deleted-extensions-under-same-names

Cybersecurity analysts have found a vulnerability in the Visual Studio Code Marketplace that enables malicious individuals to utilize names of extensions that were previously deleted. The software supply chain security firm ReversingLabs reported this finding after they detected a harmful extension titled “ahbanC.shiba,” which operated in a manner akin to two other extensions – ahban.shiba and ahban.cychelloworld –


Leave a Reply

Your email address will not be published. Required fields are marked *

Share This