Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension
Cybersecurity researchers have flagged a supply chain attack
targeting a Microsoft Visual Studio Code (VS Code) extension called
Ethcode that has been installed a little over 6,000 times. The
compromise, per ReversingLabs, occurred via a GitHub pull request
that was opened by a user named Airez299 on June 17, 2025. First
released by 7finney in 2022, Ethcode is a VS Code extension that's
used to
Read more https://thehackernews.com/2025/07/malicious-pull-request-infects-6000.html