vscode-github-token-grab-extension

hello-world 自述文件 请勿安装。这是一个用于我测试 VS Code 发布的扩展。...

CVE-2021-26700

NPM VSCode 扩展中的远程代码执行漏洞 已于 2021 年 2 月 10 日修复，修复提交：https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 漏洞公告：https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 概述 eg2.vscode-npm-script VSCode 扩展（测试版本为 0.3.13）中存在远程代码执行漏洞，这意味着项目中的恶意...

live-server-evil-crawler

Live Server 邪恶爬虫 一个 GitHub Pages 站点，用于演示 Live Server VSCode 扩展漏洞（CVE-2025-65717）。 概述 该工具演示了一个漏洞：Live Server 允许来自任何来源的请求，从而使得恶意网页能够访问运行在 localhost 上的 Live Server 并读取文件系统内容。 功能 端口扫描器 ：扫描一定范围的端口以检测正在运行的 Live Server 实例 爬虫 ：递归探索检测到的服务器的目录结构 基于 该代码基于以下文章： Ox Security - CVE-2025-65717: Live Server VSCod...

vscode-frida

将 Frida 集成到 VSCode 源码仓库 | GitHub Issues | 安装到 VSCode 本项目为社区贡献项目，与 Frida 官方团队无关。由 @CodeColorist 开发和维护，是一个开源的 Visual Studio Code 扩展，旨在提升 Frida 脚本开发体验。 前置要求 Python = 3.7 frida-tools Python 包 可选依赖 libimobiledevice（用于 inetcat 命令启动 SSH shell） Windows 上的 iTunes（用于 iOS USB 连接） 如果你在 Windows 上，需要保持 iTunes...

Malicious Package

Overview vscode-vue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Inclusion of Functionality from Untrusted Control Sphere

Overview @theia/plugin-ext-vscode is a Theia - Plugin Extension for VsCode Affected versions of this package are vulnerable to Inclusion of Functionality from Untrusted Control Sphere due to missing workspace-trust enforcement in the plugin and extension loading path. An attacker can execute...

@theia/vsx-registry (>=1.1.0-next.14531578, <=1.69.0), openvsx-server (>=1.59.0, <=1.59.1) potentially affected by CVE-2026-19884 via @theia/plugin-ext-vscode (>=1.1.0-next.a62a6b92, <=1.69.0-next.81)

@theia/plugin-ext-vscode NPM version =1.1.0-next.a62a6b92, =1.1.0-next.14531578, =1.59.0, =1.59.1 Source cves: CVE-2026-19884 Source advisory: SNYK:JS-THEIAPLUGINEXTVSCODE-18855353...

CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

...

MAL-2026-11558 Malicious code in @cacheable/memory (npm)

npm/@cacheable/memory version 2.2.1 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through...

EUVD-2026-50979

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-59326 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-47858 live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

CVE-2026-47858 live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

CVE-2026-47858 live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

CVE-2026-47858

CVE-2026-47858 affects Spring Tools environments when the live information startup mode is enabled in Spring Tools for Eclipse (5.2.0 and earlier) and Spring Tools for VSCode/Cursor/Theia (2.2.0 and earlier). The vulnerability is described as a JMX-based remote code execution risk arising from th...

PT-2026-66364

Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Spring Tools for VSCode / Cursor / Theia versions prior to 2.2.1 Description Starting Spring Boot applications in Spring Tools with the live information mode enabled allows for remote code...

CVE-2026-47858: Missing Authentication for Critical Function

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

CVE-2026-59326: Insertion of Sensitive Information into Log File

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-46412 Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

CVE-2026-59831

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...