Malicious VSCode Marketplace extensions hid trojan in fake PNG file
From BleepingComputer to All on Thu Dec 11 16:05:53 2025
A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders. [...]