TechRadar: New attacks exploit VSCode extensions and npm packages

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.

Lessons learned from the headline-grabbing cybersecurity incidents of 2024