Open VSX Unblocks 3 Extension IDs Used in Malware Campaign, Complicating Threat Tracking
Mon Aug 24 2026
Malware
Open Source
cyberpress.org
Open VSX removed three extension IDs from its malicious-extension list between August 16 and August 20, restoring publishing access to legitimate developers whose identifiers had been hijacked in a large-scale impersonation campaign. The reversals affect AlDuncanson.react-hooks-snippets, magne-sjaastad.opm-flow-editor-support, and rumbledb.jsoniq-vscode all three previously used by impostors in a 77-extension evil-twin campaign documented by Manifold Security earlier […]
The post Open VSX Unblocks 3 Extension IDs Used in Malware Campaign, Complicating Threat Tracking appeared first on Cyber Security News.