Malicious VSCode Marketplace extensions hid trojan in fake PNG file

Published on December 11, 2025

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders. [...]

Continue reading on website
Other news

UK fines LastPass over 2022 data breach impacting 1.6 million users

December 11, 2025
The UK Information Commissioner's Office (ICO) fined the LastPass password management firm £1.2 million for failing to implement security measures that allowed an attacker to steal personal information and encrypted password vaults belonging to up to 1.6 million UK users in a 2022 breach. [...]

Notepad++ fixes flaw that let attackers push malicious update files

December 11, 2025
Notepad++ version 8.8.9 was released to fix a security weakness in its WinGUp update tool after researchers and users reported incidents in which the updater retrieved malicious executables instead of legitimate update packages. [...]