Breach404
Back to Insights
Secure Software2 min readAugust 4, 2026

77 Open VSX extensions found harvesting developer info

Seventy-seven malicious extensions on the Open VSX marketplace impersonated legitimate developer tools while secretly collecting sensitive information about developers' systems and development environments. You should immediately audit any Open VSX extens

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free