I was complaining about VS Code’s unvetted marketplace just a week ago. It’s wild that the industry responds to the ever-increasing threat of information theft by creating wide-open attack vectors like this, that we could absolutely do without.
unicornCoder ☑️ :gnome: :bash: (@unicornCoder@fosstodon.org)
check your #vscode extensions! legit is DRACULA official has verified icon , 7.1 million downloads fake is darcula https://www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/ #cybersecurity
Want to know when I post new content to my blog? It's a simple as registering for free to an RSS aggregator (Feedly, NewsBlur, Inoreader, …) and adding www.ff00aa.com to your feeds (or www.garoo.net if you want to subscribe to all my topics). We don't need newsletters, and we don't need Twitter; RSS still exists.
Legal information: This blog is hosted par OVH, 2 rue Kellermann, 59100 Roubaix, France, www.ovhcloud.com.
Personal data about this blog's readers are not used nor transmitted to third-parties. Comment authors can request their deletion by e-mail.
All contents © the author or quoted under fair use.
