Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

Dec 9, 2025

Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware.
The VS Code extensions masquerade as a premium dark theme and an artificial intelligence (AI)-powered coding assistant, but, in actuality, harbor covert functionality to download additional payloads, take

Get Free Report & Network Analysis

Please check your email for the free report.