Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A group of 77 malicious extensions were discovered on the Open VSX marketplace, disguising themselves as legitimate developer tools. These extensions were designed to collect and transmit information about the systems and development environments where they were installed. The malicious extensions were uploaded to the repository over a period of several days. They have since been removed from Open VSX. The extensions were identified as "evil twin" packages, implying they mimicked legitimate tools. The removal of the extensions was taken after their malicious nature was uncovered.