Passwords, open remote shells targeted by malicious Microsoft VSCode extensions

Passwords, open remote shells targeted by malicious Microsoft VSCode extensions Three new malicious Visual Studio extensions in Microsoft's VSCode Marketplace, which have amassed 46,600 downloads, have been facilitating credential and system information theft, as well as remote shell deployment on impacted machines, according to BleepingComputer.

bleepingcomputer credential deployment downloads extensions identity and access information information theft machines malicious marketplace microsoft passwords shell shells studio system theft visual studio vscode vulnerability management