AI Summary

Seventy‑seven extensions on the Open VSX marketplace were found to impersonate legitimate developer tools while sending data about the systems and development environments where they were installed. Manifold Security discovered the “evil twin” campaign between July 26 and August 1, 2026. All 77 extensions were linked to the same activity through a shared data‑exfiltration domain, as well as similar code and network behavior. The extensions transmitted information about the host environment to the attacker’s server. No further details about the attackers or the data collected were provided.

AI summaries can be wrong sometimes—always verify important details using the source article.