Critical VS Code Extensions Vulnerabilities Hit 125 Million Installs
VPN Central [Unofficial]
February 23, 2026
Four popular VS Code extensions expose developers to file theft and remote code execution. Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft Live Preview together have over 125 million installs. Attackers need just one flaw to compromise machines and move laterally. OX Security researchers found these critical issues. A single malicious extension or vuln […]
The post Critical VS Code Extensions Vulnerabilities Hit 125 Million Installs appeared first on VPN Central.
Discussion in the ATmosphere