A new campaign involving malicious Visual Studio Code (VS Code) extensions has exposed a loophole in the VS Code Marketplace that allows threat actors to reuse names of previously removed packages.
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...