Vscode on Mazin Ahmed

The GitHub Breach Through VS Code Is the One I Warned About

Fri, 22 May 2026 00:00:00 +0000

If you haven’t heard the news, GitHub confirmed unauthorized access to internal repositories through a malicious VS Code extension. I’ve been warning about this. I predicted it would happen in my talk Compromising Developers with Malicious Extensions last December at Black Hat MEA, where I presented several flaws in VS Code and the marketplace and how people can use them to run supply chain attacks.

We still don’t have the full details yet, but here’s how I see it.

Compromising Developers with Malicious Extensions - VS Code, Cursor AI, and the Backdoor You Didn't See Coming

Sat, 06 Dec 2025 00:00:00 +0000

Introduction #

VS Code and AI-powered IDEs could lead to the largest security breaches in the industry in the near future. They’re installed on almost all developer machines globally. Developers have access to sensitive data and credentials to push code that ends up in production. A supply chain attack could lead to gaining access to developers’ machines, which in turn could provide entry to organizations’ systems.