Open VSX’s New Scanner Vulnerability Allows Malicious Extension Goes Live

A serious security flaw was recently found in Open VSX, the extension marketplace used by popular code editors like Cursor and Windsurf, as well as the broader VS Code fork ecosystem. The vulnerability was found inside the platform’s newly introduced pre-publish scanning pipeline, a security layer built to check every extension before it becomes available […]

The post Open VSX’s New Scanner Vulnerability Allows Malicious Extension Goes Live appeared first on Cyber Security News.