+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code (/showthread.php?tid=6319064)
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code - Stanley - Feb 3, 2026
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor covert functionality to siphon developer data to China-based servers.
The extensions, which have 1.5 million combined installs and are still available for download from the official Visual Studio
https://thehackernews.com/2026/01/malicious-vs-code-ai-extensions-with-15.html
RE: Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code - The Pact - Feb 5, 2026
Developers thought they were getting smart autocomplete. The extensions thought they were getting free source code to ship off to servers in China.
It’s like inviting a helpful intern into your office and discovering they’ve been photocopying your notebooks and mailing them overseas for fun.