Security News Malicious VSCode Marketplace extensions hid trojan in fake PNG file BleepingComputer Daniel Bender 11 Dec 2025 A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders.
