Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
77 malicious 'evil twin' Open VSX extensions impersonated developer tools and exfiltrated hostnames and detailed workspace reconnaissance to mangorbit.com.
40
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 1, 2026
- Last mentionedSep 1, 2026
Timeline
1 articles · newest firstAppears with
- Manifold Securityvendor · 1
- Claudeproduct · 1
- Microsoftvendor · 1
- Claudeai model · 1
- Visual Studio Codeproduct · 1
- Shai-Huludmalware · 1
- OX Securityvendor · 1
- Open VSXproduct · 1
- Open VSXorganization · 1
- Mini Shai-Huludmalware · 1
- npmproduct · 1
- Socketvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.