579 matches found
Malicious code in forge-vscode (npm)
The package forge-vscode was found to contain malicious code...
Malicious code in ms-azuretools.vscode-azureresourcegroups (npm)
The package ms-azuretools.vscode-azureresourcegroups was found to contain malicious code...
Malicious code in vscode-antlr4 (npm)
The package vscode-antlr4 was found to contain malicious code...
Malicious code in vscode-extend (npm)
The package vscode-extend was found to contain malicious code...
Malicious code in vscode-import-sort (npm)
The package vscode-import-sort was found to contain malicious code...
Malicious code in vscode-mssql (npm)
The package vscode-mssql was found to contain malicious code...
Malicious code in vscode-notebook-renderer (npm)
The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...
Malicious code in vscode-reh (npm)
The package vscode-reh was found to contain malicious code...
Malicious code in aws-core-vscode (npm)
The package aws-core-vscode was found to contain malicious code...
MAL-2025-20779 Malicious code in forge-vscode (npm)
The package forge-vscode was found to contain malicious code...
MAL-2025-38650 Malicious code in vscode-antlr4 (npm)
The package vscode-antlr4 was found to contain malicious code...
MAL-2025-38652 Malicious code in vscode-import-sort (npm)
The package vscode-import-sort was found to contain malicious code...
MAL-2025-38655 Malicious code in vscode-reh (npm)
The package vscode-reh was found to contain malicious code...
MAL-2025-38654 Malicious code in vscode-notebook-renderer (npm)
The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...
Malicious code in vscode-kubernetes-tools (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6779 Malicious code in vscode-kubernetes-tools (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vscode-oneapi-environment-configurator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8b4992dcea3340ef6012db58cede2756b194c824f67c49b3ebae3b30a9b946c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in vscode-oneapi-environment-configurator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-5737 Malicious code in vscode-oneapi-environment-configurator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8b4992dcea3340ef6012db58cede2756b194c824f67c49b3ebae3b30a9b946c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-52882
Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks e.g., Cursor, Windsurf, and VSCodium and JetBrains IDEs e.g., IntelliJ, Pycharm, and Android Studio are vulnerable to unauthorized websocket connections from an attacker when visiting attacker-controlled webpages...