Malicious crypto-stealing VSCode extensions resurface on OpenVSX

17:35 - 14 Oct 2025

A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft's Visual Code (VSCode) marketplace and OpenVSX registry to steal cryptocurrency and plant backdoors. [...]