Search
A security firm has recently uncovered a critical vulnerability in the Microsoft VS Code extension marketplace. This flaw allows hackers to upload malicious extensions under the same names as those that have been previously removed. Similar issues have plagued platforms like PyPI in the past. Researchers have observed instances where hackers uploaded a ransomware extension named "ahbanC.shiba", masquerading as the legitimately removed "ahban.shiba" extension. A detailed analysis reveals that when an extension is merely "removed," its name can be reused, whereas opting to "unlist" it prevents others from adopting the same moniker. The security firm strongly advises developers to prioritize "unlisting" over "removing" extensions when they are no longer in use, thereby preventing their names from being maliciously appropriated.
-
C114 Communication Network -
Communication Home
