Malware Discovered in 19 Visual Studio Code ExtensionsInfosecurity Magazine·Dec 11, 16:00 UTC · Dec 11, 2025Malware42
Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy ExpertsThe Hacker News·Sep 18, 12:42 UTC · Sep 18, 2025Malware42
Ghidra 11.3 released: New features, performance improvements, bug fixesHelp Net Security·Feb 7, 00:00 UTC · Feb 7, 2025Malware130
The Solidity Language open-source package was used in a $500,000 crypto heistKaspersky Securelist·Jul 10, 11:00 UTC · Jul 10, 2025Malware42
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksThe Hacker News·Aug 4, 15:03 UTC · Aug 4, 2026Malware142
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, ZeroThe Hacker News·Oct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-2104360
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Cryptocurrency Stealer Malware Distributed via 13 NuGet PackagesThe Hacker News·Apr 12, 03:41 UTC · Apr 12, 2023Malware42
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
Malicious VS Code Extensions Deploy Advanced InfostealerInfosecurity Magazine·Dec 9, 16:45 UTC · Dec 9, 2025Malware30
Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023Help Net Security·Mar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108CVE-2026-20127160
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops MalwareThe Hacker News·Jan 29, 10:32 UTC · Jan 29, 2026Malware42
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code ExtensionThe Hacker News·Jul 10, 10:33 UTC · Jul 10, 2025Malware142
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwareThe Hacker News·Apr 28, 04:06 UTC · Apr 28, 2026Malware42
Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX ExtensionsThe Hacker News·Feb 4, 06:26 UTC · Feb 4, 2026Malware42
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and CredentialsThe Hacker News·Aug 10, 10:57 UTC · Aug 10, 2026Malware130
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain AttackThe Hacker News·Oct 24, 07:00 UTC · Oct 24, 2025Malware42
⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & MoreThe Hacker News·Jan 26, 16:53 UTC · Jan 26, 2026MalwareCVE-2025-59718CVE-2025-59719CVE-2026-2406160
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer DataThe Hacker News·Jan 20, 10:47 UTC · Jan 20, 2026Malware130
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain AttacksThe Hacker News·Jun 8, 17:09 UTC · Jun 8, 2026Malware42
Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz DiscoveryThe Hacker News·Nov 6, 04:40 UTC · Nov 6, 2025Malware42
GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of InstallsThe Hacker News·Nov 10, 08:51 UTC · Nov 10, 2025Malware30
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and CryptoThe Hacker News·Jan 28, 13:38 UTC · Jan 28, 2026Malware30
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain DevelopersThe Hacker News·Jan 26, 08:54 UTC · Jan 26, 2026Malware42
GootLoader Malware Still Active, Deploys New Versions for Enhanced AttacksThe Hacker News·Jul 10, 03:04 UTC · Jul 10, 2024Malware30
CrowdStrike, Google Take Down Glassworm BotnetInfosecurity Magazine·May 27, 14:00 UTC · May 27, 2026Malware42
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows InstallerThe Hacker News·Aug 5, 05:49 UTC · Aug 5, 2026Malware42
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and LinuxThe Hacker News·May 7, 09:20 UTC · May 7, 2026Malware42
DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RATThe Hacker News·Aug 4, 09:03 UTC · Aug 4, 2026Malware30
Thousands Download Malicious npm Libraries Impersonating Legitimate ToolsThe Hacker News·Jan 22, 15:32 UTC · Jan 22, 2025Malware42
‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supplyCyberScoop·May 12, 21:38 UTC · May 12, 2026Malware155
Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto AddressesThe Hacker News·Apr 10, 14:18 UTC · Apr 10, 2025Malware42