Over 550 VS Code Extensions Leaked Sensitive Secrets
Researchers discovered over 550 secrets leaked by more than 500 VS Code extensions. Wiz Security found that many of these secrets were related to high-risk platforms like AWS, GCP, and GitHub, and could have been used for supply chain attacks if attackers gained access to update the extension itself. Microsoft has now implemented secret-scanning across … Read more