Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 malicious extensions on the Open VSX marketplace has been discovered impersonating legitimate developer tools while exfiltrating sensitive information…
Tag: Manifold Security
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A critical vulnerability in Microsoft's official Azure DevOps MCP server allows attackers to inject hidden HTML comments into pull request descriptions, which…
Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Researchers at Manifold Security have disclosed two vulnerabilities in the Claude for Chrome browser extension that could allow rogue extensions to trigger…
Manifold Security Discovers Evil Twin Extensions on Open VSX
Manifold Security identified a cluster of 77 malicious 'evil twin' extensions on the Open VSX marketplace that impersonated legitimate developer tools and…