Malicious helpers: VS Code Extensions observed stealing sensitive information

In the last few years, there has been a dramatic rise (1300%) in supply chain attacks across multiple public repositories. ReversingLabs’ researchers have been monitoring them daily to detect malicious packages. After packages are detected, the team notifies administrators for these public repositories, and encourages them to take the offending packages down if they are still up. With these threat hunting efforts, the RL research team is trying to raise awareness of the threat posed to software producers and …

administrators attacks code daily detect extensions information malicious malicious packages monitoring packages public repositories researchers reversinglabs sensitive sensitive information stealing supply supply chain supply chain attacks team threat research vs code