Read more https://thehackernews.com/2025/08/researchers-find-vs-code-flaw-allowing.html
Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names
Cybersecurity researchers have discovered a loophole in the Visual
Studio Code Marketplace that allows threat actors to reuse names of
previously removed extensions. Software supply chain security
outfit ReversingLabs said it made the discovery after it identified
a malicious extension named "ahbanC.shiba" that functioned
similarly to two other extensions – ahban.shiba and
ahban.cychelloworld –
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
