A malicious VS Code extension in the Open VSX registry that masquerades as the popular Angular Language Service. Published two weeks ago, it amassed 5,066 downloads before activating sophisticated malware. The extension bundles legitimate Angular tooling (@angular/language-service 21.1.0-rc.0) and TypeScript 5.9.3. However, it contains malicious code hidden in the extension/index.js file, posing a severe supply-chain […]

The post Sophisticated Malware Lurks In Open VSX Extension With 5,066 Downloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Varshini

Source: gbHackers
Source Link: https://gbhackers.com/malware-hits-open-vsx-extension/