Record · corpus.blog/posts/01a08c5f-5f1d-7119-a23c-f3dc080c3519

Defending Your IDE — Protecting Against Malicious or Compromised Visual Studio Extensions

voidst.one · published 25 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at voidst.one Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 27
Words captured: 2,673

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w

github.com

https://twitter.com/github/status/2056949168208552080?ref_src=twsrc%5Etfw

twitter.com

Postmortem: Nx Console v18.95.0 supply-chain compromise Read at the source ↗

nx.dev

https://marketplace.visualstudio.com/

marketplace.visualstudio.com

https://open-vsx.org/

open-vsx.org

https://code.visualstudio.com/updates/v1_123

code.visualstudio.com

https://github.com/DataDog/guarddog

github.com

https://semgrep.dev/docs/writing-rules/overview

semgrep.dev

https://yara.readthedocs.io/en/stable/writingrules.html

yara.readthedocs.io

https://www.stepsecurity.io/blog/nx-console-vs-code-extension-compromised

stepsecurity.io

https://marketplace.visualstudio.com/items?itemName=Datadog.ide-shepherd-extension

marketplace.visualstudio.com

https://github.com/DataDog/IDE-SHEPHERD-extension/releases/tag/v3.1.0

github.com

https://github.com/voidst1/suspicious-vscode-extension

github.com

https://attack.mitre.org/techniques/T1105/

attack.mitre.org

https://attack.mitre.org/techniques/T1552/001/

attack.mitre.org

https://blog.ammaraskar.com/github-token-stealing/

blog.ammaraskar.com

https://www.eicar.org/download-anti-malware-testfile/

eicar.org

https://containers.dev/

containers.dev

https://code.visualstudio.com/docs/devcontainers/containers

code.visualstudio.com

https://www.docker.com/

docker.com

https://podman.io/

podman.io

https://cooldowns.dev/

cooldowns.dev

We should all be using dependency cooldowns Read at the source ↗

blog.yossarian.net

https://code.visualstudio.com/docs/devcontainers/tutorial

code.visualstudio.com

https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers

docs.github.com

https://github.com/step-security/dev-machine-guard

github.com

https://github.com/SocketDev/sfw-free

github.com