3 ms·
VSCode extensions with 9M installs pulled over security risks
- ChrisArchitect 2y agoDiscussion: https://news.ycombinator.com/item?id=43178831 https://news.ycombinator.com/item?id=43178831
- metadat 2y agoThanks! Macro-expanded: Material Theme has been pulled from VS Code's marketplace https://news.ycombinator.com/item?id=43178831 https://news.ycombinator.com/item?id=43178831 (Yesterday, 393 comments)
- jgalt212 2y ago> A partial deobfuscation of the code showed numerous references to usernames and passwords. However, as the file was still heavily obfuscated, BleepingComputer could not determine in what way they were being referenced. I thought ChatGPT was supposed to deofuscate js. Anyone give it a whirl?
- mfro 2y agoI think it's quite funny theme extensions even get to run code on the client. Soon: prudent CTOs ban all editors, devs forced to used nano
- flufluflufluffy 2y agoLuckily I can’t stand Material themes so I’m all good!
- bitbasher 2y agoThere does look to be some malicious code. I uploaded the code to pastebin. https://pastebin.com/H5QjS4Bt https://pastebin.com/H5QjS4Bt