The Hacker News: Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

Developers targeted by malicious Microsoft VSCode extensions

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.