Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Home / Tech / Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

August 5, 2026 dirk 0 Comments 3 tags

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed.

The “evil twin” extensions were uploaded to the repository between July 26 and August 1, 2026, according to Manifold Security. The packages have been removed from Open VSX as of

Source: The Hacker News

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 20.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. Keine relevanten IPs erfasst (ruhig oder stark gefiltert). Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.

Polymarket has flooded social media with deceptive videos by paid creators

Polymarket has flooded social media with deceptive videos by paid creators Source: Hacker News