CIRCLE WITH A DOT

Now is a good time to remind everyone that there has been an open request since 2018 to harden how VS Code extensions are run, and Microsoft has yet to address it

[Feature Request] Extension Permissions, Security Sandboxing & Update Management Proposal · Issue #52116 · microsoft/vscode

I believe that Visual Studio Code should support some kind of "Extension Permission Management", complete with prompts, warnings, opt-in, and opt-out, similar to what has been supported for some time now with Chrome, Firefox, and other b...

GitHub (github.com)

Malicious VS Code extensions strike again. I’ve lost track of how many times this has happened.

X Cancelled | Verifying your request

(xcancel.com)

#infosec #breach #cybersecurity #github #vscode