Bleeping Computer: Malicious NuGet packages abuse MSBuild to install malware

Developers targeted by malicious Microsoft VSCode extensions

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.