Open VSX Removes 77 Malicious Evil Twin Extensions Impersonating Developer Tools

A cluster of 77 fraudulent extensions was found on the Open VSX marketplace that mimicked legitimate development tools to exfiltrate information about the…

Immediately audit which Open VSX extensions you have installed, especially those uploaded between July 26 and August 1, 2026. Uninstall any tools you don't recognize or cannot verify. Consider investigating what development or system data may have been exposed if you installed any of these extensions.