North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The ...
Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer data.
LayerX discovered 16 extensions in the Chrome Web Store and Microsoft Edge Add-ons marketplace that steal users’ ChatGPT ...
Two VSCode extensions are harvesting sensitive data and sending it to China.
Experts uncovered malicious Chrome extensions that replace affiliate links, exfiltrate data, and steal ChatGPT authentication tokens from users.
Corin Cesaric is a Flex Editor at CNET. She received her bachelor's degree in journalism from the University of Missouri-Columbia. Before joining CNET, she covered crime at People Magazine and ...