Security researchers found malicious code hiding in two VSCode extensions Microsoft quickly ... there was “heavily obfuscated JavaScript, which is always a red flag in open-source software.” ...

Reversing Labs and Assaraf discover campaign targeting software and web3 devs Multiple packages were hiding weaponized code ...