VS Code hack shows how supply chain attacks can extend to other software development tools

From an information security perspective, 2022 can be called “The Year of Software Supply Chain Attacks.” Malicious actors have shifted their focus to new landscapes. Ten or 20 years ago, malware was piled up and served through services providing pirated content and email spam. Today’s malware has evolved to target the supply chain, and it is getting served through open source software distribution points.

attacks called code development distribution email email spam focus hack information information security malicious malicious actors malware open source perspective pirated security services software software development software supply chain software supply chain attacks software supply chain security spam supply supply chain supply chain attacks target threat research tools vs code