Microsoft Visual Studio Code flaw lets extensions steal passwords
www.bleepingcomputer.com
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS credential managers.
  • @LethalSmack
    1•2 years ago

    “The tech giant decided against fixing the issue, as extensions are not expected to be sandboxed from the rest of the environment.”

    Yikes