CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

Open VSX Marketplace Removes Malicious Extensions

August 5, 2026

Open VSX, an open-source marketplace for Visual Studio Code extensions, removed 77 malicious 'evil twin' extensions that exfiltrated developer data. The extensions impersonated legitimate tools and were published through unrelated accounts.