Product
VSCode Marketplace
- First Reported
- Oct 15, 2025
- Latest Reported
- Oct 15, 2025
Reported Context (1)
- itself. By default, VS Code will auto-update extensions as new versions become available. A leaked VSCode Marketplace or OpenVSX PAT allows an attacker to directly distribute a malicious extension update across the Wiz Finds 550 Leaked Secrets in VSCode Extensions, Including Tokens That Could Enable Malicious Updates
Vendors (1)
Products (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.