VS Code Marketplace’s Comedy of Errors: When Shiba Inu Ransomware Finds a Loophole!
Beware of the “shiba” name game! Malicious VS Code extensions are reusing names of removed packages to deliver ransomware. ReversingLabs found that names aren’t as unique as they should be, turning the VS Code Marketplace into a playground for crafty cyber villains. Stay vigilant, developers—these shibas are no man’s best friend.
Hot Take:
Oh, Microsoft! Reusing extension names? It’s like letting anyone rename your Wi-Fi to “Free Internet” and then being surprised when things go wrong. This isn’t just a can of worms; it’s a full-blown worm rave with malicious extensions dancing through VS Code Marketplace like they own the place!
Key Points:
- Malicious VS Code extensions exploit a loophole by reusing names of removed packages.
- Attackers delivered ransomware through extensions named “shiba.”
- ReversingLabs researchers uncovered this naming loophole.
- VS Code Marketplace contradicts its own documentation on unique names.
- No indication Microsoft has fixed the naming reuse issue yet.
Already a member? Log in here