Microsoft Visual Studio Code flaw lets extensions steal passwords
www.bleepingcomputer.com
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS credential managers.
  • momoitin@sh.itjust.works
    2·
    1 year ago

    Yeah that sounds about right, anyways go try to use vscodium. It works the same way and you can even get extensions added to it but it takes a bit more work.

  • LethalSmack@lemmy.world
    1·
    1 year ago

    “The tech giant decided against fixing the issue, as extensions are not expected to be sandboxed from the rest of the environment.”

    Yikes