ended4월 14일· 1 sources
GlassWorm Alert: Why Your VS Code Extensions Are a Security Time Bomb
내 VS Code 확장 프로그램이 스파이? GlassWorm 공급망 공격의 실체
Why it matters
Developer environments are high-value targets as they house production secrets and source code. Because VS Code extensions lack a sandbox, a seemingly harmless tool can gain full system access to exfiltrate credentials or inject backdoors into your commits.
1
Sources
+0
24h
—
Growth
160d
Active
VS Code ExtensionsSupply Chain AttackGlassWormDeveloper SecurityMalware