Bloom Security's Extension Resurrection research exposes a blind spot in developer security

Bloom Security found that 677 VS Code Marketplace extension packs and 94 Open VSX packs contained references to extensions that did not exist, creating a supply-chain attack path through trusted developer tooling with 500,000+ downloads at risk.

Raccontata dathenextweb.com