Microsoft's VSCode Marketplace Attacked Via Malicious Visual Studio Extensions

Three malicious Visual Studio extensions have been found on Microsoft's VSCode marketplace, totaling over 46,000 downloads. Those extensions allow attackers to steal the victim's credentials and establish a remote shell on the victim's device. The names of the extensions are "Theme Dracula Dark," - the most popular one, "python-vscode," and "prettiest java." Any developers using those extensions right now are recommended to delete them manually. Read more...