VSCode Extensions with 9 Million Installs Removed Due to Security Risks
CybersecurityVulnerabilitiesSoftwareSecurityDeveloperTools
Two VSCode extensions, "SVG Viewer" and "open in browser," have been removed from the Visual Studio Code marketplace due to security concerns. These extensions, which had a total of 9 million installations, contained features that allowed the execution of arbitrary code, posing a risk to users. The developers of the extensions were informed of the vulnerabilities but did not respond to attempts at contact.