41,554 blogs · 5,197,919 posts Claim your blog

Record · corpus.blog/posts/01a0875d-3068-719d-b8fa-3f6808b6a817

Abusing VS Code's Bootstrapping Functionality To Quietly Load Malicious Extensions

casvancooten.com · published 27 February 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at casvancooten.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 14
Words captured: 1,202

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Chinese APT Abuses VSCode to Target Government in Asia Read at the source ↗

unit42.paloaltonetworks.com

https://www.bleepingcomputer.com/news/security/malicious-vscode-extensions-with-millions-of-installs-discovered/

bleepingcomputer.com

https://arxiv.org/html/2411.07479v1

arxiv.org

https://www.reversinglabs.com/blog/malicious-helpers-vs-code-extensions-observed-stealing-sensitive-information

reversinglabs.com

https://www.bleepingcomputer.com/news/security/vscode-extensions-with-9-million-installs-pulled-over-security-risks/

bleepingcomputer.com

https://code.visualstudio.com/api/get-started/your-first-extension

code.visualstudio.com

https://code.visualstudio.com/docs/editor/extension-runtime-security

code.visualstudio.com

https://www.mdsec.co.uk/2023/08/leveraging-vscode-extensions-for-initial-access/

mdsec.co.uk

https://code.visualstudio.com/updates/v1_97

code.visualstudio.com

https://code.visualstudio.com/docs/setup/enterprise

code.visualstudio.com

https://github.com/microsoft/vscode/blob/main/src/vs/code/electron-utility/sharedProcess/contrib/defaultExtensionsInitializer.ts

github.com

https://code.visualstudio.com/docs/editor/portable

code.visualstudio.com

https://github.com/microsoft/vscode/blob/bd4ab867f9ca31105f05032cf09edbce31fc6fe3/src/bootstrap-node.ts

github.com

https://github.com/microsoft/vscode/blob/main/src/bootstrap-meta.ts

github.com