AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.
Exposure
Jan 26, 2026 05:30
Jan 26, 2026 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Jan 26, 2026 05:30BugSkan first recorded this incident.
-
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code - The Hacker News
Jan 26, 2026 05:30thehackernews.com · Malware
Sources
thehackernews.com · Jan 26, 2026 05:30
Two malicious Visual Studio Code extensions, disguised as AI coding assistants, have been found siphoning developer source code and opened files to China-based servers. These extensions, with a combined 1.5 million installs, leverage covert spyware functionality to exfiltrate sensitive data in Base64 format and fingerprint devices via hidden analytics SDKs.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.