[HN Gopher] VSCode extensions with 9M installs pulled over secur...
       ___________________________________________________________________
        
       VSCode extensions with 9M installs pulled over security risks
        
       Author : protik49
       Score  : 6 points
       Date   : 2025-02-28 21:29 UTC (1 hours ago)
        
 (HTM) web link (www.bleepingcomputer.com)
 (TXT) w3m dump (www.bleepingcomputer.com)
        
       | ChrisArchitect wrote:
       | Discussion: https://news.ycombinator.com/item?id=43178831
        
         | metadat wrote:
         | Thanks! Macro-expanded:
         | 
         |  _Material Theme has been pulled from VS Code 's marketplace_
         | 
         | https://news.ycombinator.com/item?id=43178831 (Yesterday, 393
         | comments)
        
       | jgalt212 wrote:
       | > A partial deobfuscation of the code showed numerous references
       | to usernames and passwords. However, as the file was still
       | heavily obfuscated, BleepingComputer could not determine in what
       | way they were being referenced.
       | 
       | I thought ChatGPT was supposed to deofuscate js. Anyone give it a
       | whirl?
        
       | mfro wrote:
       | I think it's quite funny theme extensions even get to run code on
       | the client. Soon: prudent CTOs ban all editors, devs forced to
       | used nano
        
       ___________________________________________________________________
       (page generated 2025-02-28 23:02 UTC)