Fake ChatGPTs harvest data from 1.5M developers
A massive file harvesting campaign is ongoing, targeting VS Code developers . Over 1.5 million users have downloaded knock-off extensions that function like AI coding assistants but are also bristling with spyware. KOI Security researchers warn that searching for the "ChatGPT" extension on the VS ...
Explore attacks from malicious AI extensions and gain VS Code AI security tactics, governance steps to safeguard developer pipelines today.
Malicious VS Code AI Extensions with 1.5 Million Installs Steal ...
More than 1.5 million people may have had their sensitive data exfiltrated to Chinese hackers through two malicious extensions found on the VSCode Marketplace.
VS Code AI Extensions Supply Chain Breach Exposes Developer Source Code ...
Malicious AI VS Code extensions with 1.5M+ installs leaked source code to China-based servers, highlighting urgent supply chain risks in 2026.
Microsoft's Visual Studio Code (VSCode) Marketplace recently became a vector for cyber threats due to the emergence of two malicious extensions . Collectively tallying up to 1.5 million installations, these extensions posed a significant security risk by exfiltrating sensitive developer data to servers based in China.
Two coding‑assistant add‑ons exfiltrate source code and telemetry to China‑based servers, affecting about 1.5m installs. Two AI‑powered extensions listed on Microsoft's Visual Studio Code ( VS Code ) Marketplace have been found exfiltrating developers' data to China‑based servers ...
Moving forward, it's essential to keep these visual contexts in mind when discussing Vs Code Security Breach Malicious Extensions Hit 1 5M Developers AI Certs News.
Two malicious extensions in Microsoft's Visual Studio Code (VSCode) Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs
Two popular AI coding extensions with 1.5M installs secretly harvest your entire codebase and profile you. Both are still live in the marketplace.
A stolen API key lets an attacker consume that quota at zero cost while the legitimate owner keeps paying the bill, creating a growing black market for resold AI access. Malicious JetBrains and VS Code Extensions All 15 malicious plugins shared nearly identical code , repackaged and relisted under different names and vendor accounts.
Additional Notes on Vs Code Security Breach Malicious Extensions Hit 1 5M Developers AI Certs News
VS Code Security Breach Malicious Extensions Hit 1 5M Developers AI CERTs News. For Vs Code Security Breach Malicious Extensions Hit 1 5M Developers AI Certs News, this point helps readers notice the most relevant visual details before moving into the gallery.
Browser Extensions Helpful or Harmful. It works as a short bridge between the article summary and the gallery section.
Dangerous Chrome Extensions Leak Personal Data and Track Users Cybersecurity. The extra context helps the page feel more useful without forcing the same phrase repeatedly.
