The Hacker News

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
The Hacker News

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...