13
Malicious VSCode extensions infect Windows with cryptominers
(www.bleepingcomputer.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 07 Apr 2025
13 points (100.0% liked)
Cybersecurity
7419 readers
32 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 2 years ago
MODERATORS
With features like this, remind me again why I should use VSCode?
You can get similar miners on any platform, where there is a marketplace or store with minimal oversight. Obviously you can target different demographics, but it's not something special in vscode that made this specifically available here.
Or do you say the xz attack from last year was a "feature of linux" and linux shouldn't be used by anyone?
The extension store of vscode is a godsend, but you can use the third party unofficial fully foss store unrelated of microsoft: https://open-vsx.org/ You can literally find an extensions for any workflows or languages, please show me another editor where you can find language support for mikrotik rsc script files, AND home assistant style yaml AND AutoCAD dialect of lisp called AutoLisp. Just picked 3 obscure I actually used in my life.