Malicious VSCode extensions with millions of installs discovered (www.bleepingcomputer.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

top 4 comments

sorted by: hot top controversial new old

[-] [email protected] 16 points 2 weeks ago

That headline is quite misleading ... the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.

[-] [email protected] 8 points 2 weeks ago

Not quite. Their "malicious" extension only got a few hundred installs. Using the data gathered by that extension and via other means they were able to locate other actually malicious extensions. Those total in the millions of installations.

Through this process, they have found the following:

1,283 with known malicious code (229 million installs).
8,161 communicating with hardcoded IP addresses.
1,452 running unknown executables.
2,304 that are using another publisher's Github repo, indicating they are a copycat.

[-] [email protected] 1 points 2 weeks ago

Ah it makes more sense that way, I didn't read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.

[-] [email protected] 1 points 2 weeks ago

darcula dead and loving it

this post was submitted on 10 Jun 2024

36 points (100.0% liked)

Programming

13266 readers

7 users here now

All things programming and coding related. Subcommunity of Technology.

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 1 year ago

MODERATORS

[email protected]