Microsoft Visual Studio Code flaw lets extensions steal passwords
www.bleepingcomputer.com
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS credential managers.
  • @[email protected]
    2•2 years ago

    Yeah that sounds about right, anyways go try to use vscodium. It works the same way and you can even get extensions added to it but it takes a bit more work.

  • @LethalSmack
    1•2 years ago

    “The tech giant decided against fixing the issue, as extensions are not expected to be sandboxed from the rest of the environment.”

    Yikes