live feed
The Hacker News
5 Aug 2026

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed.

// analyst note

This briefing summarises reporting from The Hacker News. 90@! Ltd curates and rewrites third-party cybersecurity reporting for UK defenders. For the full technical write-up, read the original source.

Curated by 90@! Ltd from The Hacker News. Read the original for full technical detail.

Read original at The Hacker News

// 90@! Ltd

Need help acting on this?

90@! Ltd is a UK applications and cybersecurity consultancy. We help teams triage, remediate, and harden against emerging threats like this one.

Start an engagement