21CTO

Apr 21, 2025 · Information Security

Hidden VSCode Extensions Deploy Crypto Miners: What Developers Must Know

A recent security report reveals that ten malicious Visual Studio Code extensions, disguised as popular tools, install PowerShell loaders that persist, disable defenses, and deploy XMRig miners, highlighting a classic third‑party supply‑chain attack and urging developers to tighten defenses.