Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
$500K stolen via fake AI coding extension (securelist.com)
20 points by handfuloflight on July 12, 2025 | hide | past | favorite | 2 comments


Interesting that anyone can upload extensions there without them getting flagged

Which crypto assets did it target? or was it taking private keys


Yikes. Everyone who uses VSCode or its variants should be at least a little freaked out here ...




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: