Security News Malicious crypto-stealing VSCode extensions resurface on OpenVSX BleepingComputer Daniel Bender 14 Oct 2025 A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft's Visual Code (VSCode) marketplace and OpenVSX registry to steal cryptocurrency and plant backdoors.