235
Malicious VSCode extensions with millions of installs discovered (www.bleepingcomputer.com)
submitted 2 years ago by to c/programming@programming.dev
53 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (1 child)

Microsoft doesn't have a vetting process for publishing extensions in the store. Maybe the failure is that people assume they do?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Surely you mean "that Microsoft does not make it clear that they don't"?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago*

    Maybe, but I think the only app store that does vet apps is the Apple one, so that should be the default expectation.

    And I think even they wouldn't manually look for something like this. They're mainly concerned about people breaking the commercial rules.

  • permalink
  • fedilink
  • source
  • parent