> TritonInfoSec News
Home / Aug 06, 2026 / Story
0
#10 The Hacker News general August 05, 2026 at 09:23 UTC

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

By [email protected] (The Hacker News)

AI Summary

77 malicious 'evil twin' extensions uploaded to the Open VSX marketplace between July 26 and August 1, 2026, were found impersonating legitimate developer tools while exfiltrating system and development environment data from infected machines. Discovered by Manifold Security, the packages have since been removed, but the campaign mirrors similar supply chain attacks on VSCode marketplaces and targets software developers who represent high-value compromise targets for supply chain attacks.

Read full article → https://thehackernews.com/2026/08/open-vsx-removes…

Relevance score: 76.0/100

# More from August 06

  1. 1
    Ransom Cartel ransomware creator sentenced to 16 years in prison BleepingComputer
  2. 2
    Canadian pleads guilty to Snowflake cloud data-theft attacks BleepingComputer
  3. 3
    Thousands of servers can be backdoored by exploiting buggy motherboard controllers Ars Technica Security
  4. 4
    CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited The Hacker News
  5. 5
    Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents The Record
  6. 6
    Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself The Hacker News
  7. 7
    CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws BleepingComputer
  8. 8
    Water Sector Cyberattacks Reportedly Hit at Least 12 States SecurityWeek
  9. 9
    New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts SecurityWeek