External Publication
Visit Post

Critical VS Code Extensions Vulnerabilities Hit 125 Million Installs

VPN Central [Unofficial] February 23, 2026
Source
Four popular VS Code extensions expose developers to file theft and remote code execution. Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft Live Preview together have over 125 million installs. Attackers need just one flaw to compromise machines and move laterally. OX Security researchers found these critical issues. A single malicious extension or vuln […] The post Critical VS Code Extensions Vulnerabilities Hit 125 Million Installs appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...