Tom's Guide: Password-stealing malware hidden in open-source software - what to do

Developers targeted by malicious Microsoft VSCode extensions

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.