Bleeping Computer
8.5 — CRITICAL
77 Open VSX extensions found harvesting developer info
77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
77 malicious Open VSX extensions impersonated legitimate developer tools, collecting system and development environment information before transmitting it to a server at mangorbit[.]com.
⚙️Technical Details
Affected Systems
Open VSX marketplace
Attack Vectors
Impersonation of legitimate developer toolsTransmission of system and development environment information via mangorbit[.]com domain
💥Impact Assessment
Severity: High
🛡️Recommended Actions
1Check systems and workspace configuration files for extension IDs listed in the report
2Block the mangorbit[.]com domain
3Manually remove malicious extensions from developer's systems and applications
📦Affected Products
Open Vsx Marketplace: 77 malicious extensions
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.