Dark Reading: Supply Chain Attack Deploys Hundreds of Malicious NPM Modules to Steal Data

Developers targeted by malicious Microsoft VSCode extensions

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.