Hackers Infiltrate VS Code Marketplace with 19 Malicious Extensions Posing as PNG File

Security researchers have uncovered a significant threat targeting developers through the VS Code Marketplace. A coordinated campaign involving 19 malicious extensions has been actively infiltrating the platform, with the attack remaining undetected since February 2025. These deceptive extensions carry hidden malware in their dependency folders, designed to evade security detection and compromise developer machines. The […]

The post Hackers Infiltrate VS Code Marketplace with 19 Malicious Extensions Posing as PNG File appeared first on Cyber Security News.