Information security
fromThe Hacker News
1 week agoOver 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
Leaked access tokens in over 100 VS Code extensions allow attackers to push malicious updates, creating a critical software supply chain risk.