[H4ckN3ws]VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Popular artificial intelligence (AI)-powered

This is the hidden content, please

• Sign In
• or
• Sign Up

Visual Studio Code (VS Code) forks such as Cursor, Windsurf,

This is the hidden content, please

• Sign In
• or
• Sign Up

Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors publish malicious packages under those names. The problem, according to Koi, is that these

This is the hidden content, please

• Sign In
• or
• Sign Up