Eclipse is adding a commercial support layer to Open VSX. The new Open VSX Managed Registry provides enterprise and platform users with uptime guarantees, monitoring, usage tiers, incident response, ...
The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in a supply chain attack.
The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has uploaded 73 more impersonated links, as its attempt to infect software supply ...
The Eclipse Foundation has addressed its latest security incident involving Open VSX – the open-source marketplace for VS Code extensions. Recently, it became known that access tokens had accidentally ...
The ongoing GlassWorm campaign has deployed a fresh wave of malicious Visual Studio (VS) Code extensions, many of which seem initially benign but later deploy self-replicating malware that can poison ...
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environments. 18 kits, a 37x spike in detections, ...
The Eclipse Foundation offers the registry for Visual Studio Code Extensions as an open alternative to Microsoft's Visual Studio Marketplace.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results