https://mazinahmed.net/tags/ide-security/Recent content in Ide-Security on Mazin AhmedHugoenFri, 22 May 2026 00:00:00 +0000https://mazinahmed.net/blog/github-vscode-breach/Fri, 22 May 2026 00:00:00 +0000https://mazinahmed.net/blog/github-vscode-breach/<p> <figure><img src="https://raw.githubusercontent.com/mazen160/public/master/static/images/334d545c-6cef-4b93-b986-cb07927a47f1-compressed.png" alt="" class="mx-auto my-0 rounded-md" /> </figure> </p> <p>If you haven&rsquo;t heard the news, GitHub confirmed unauthorized access to internal repositories through a malicious VS Code extension. I&rsquo;ve been warning about this. I predicted it would happen in my talk <a href="https://mazinahmed.net/blog/publishing-malicious-vscode-extensions/" target="_blank" rel="noreferrer">Compromising Developers with Malicious Extensions</a> last December at Black Hat MEA, where I presented several flaws in VS Code and the marketplace and how people can use them to run supply chain attacks.</p> <p>We still don&rsquo;t have the full details yet, but here&rsquo;s how I see it.</p>