Cybersecurity researchers have discovered a loophole in the Visual Studio Code Marketplace that allows threat actors to reuse names of previously removed extensions.Software supply chain security outfit ReversingLabs said it made the discovery after it identified a malicious extension named “ahbanC.shiba” that functioned similarly to two other extensions ahban.shiba and ahban.cychelloworld
First seen on thehackernews.com
Jump to article: thehackernews.com/2025/08/researchers-find-vs-code-flaw-allowing.html
