Microsoft Visual Studio Code Flaw Lets Extensions Steal Passwords
Microsoft Visual Studio Code Flaw Lets Extensions Steal Passwords
www.bleepingcomputer.com Microsoft Visual Studio Code flaw lets extensions steal passwords
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS credential managers.
3 comments
Yeah that sounds about right, anyways go try to use vscodium. It works the same way and you can even get extensions added to it but it takes a bit more work.
lol
“The tech giant decided against fixing the issue, as extensions are not expected to be sandboxed from the rest of the environment.”
Yikes