Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

77 Evil Twin Open VSX Extensions Exfiltrate Private Git Repository and CI Data

Cybersecurity NewsAugust 5, 20264 min read

A wave of counterfeit Open VSX extensions has exposed how easily a familiar developer tool can become a data collection channel. Seventy-seven packages copied the names, namespaces, and descriptions of legitimate extensions, then contacted the same newly registered domain. The campaign appeared between July 26 and August 1, 2026. Most packages sent basic device details, […] The post 77 Evil Twin Open VSX Extensions Exfiltrate Private Git Repository and CI Data appeared first on Cyber Security News.

A wave of counterfeit Open VSX extensions has exposed how easily a familiar developer tool can become a data collection channel. Seventy-seven packages copied the names, namespaces, and descriptions of legitimate extensions, then contacted the same newly registered domain. The campaign appeared between July 26 and August 1, 2026. Most packages sent basic device details, but 19 contained a far more intrusive reconnaissance routine that collected repository and continuous integration information from developer workstations and…

Excerpt shown under the publisher's RSS terms · 75 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article