Home Explore Help
Sign In
pbarriat
/
learning-vscode
1
0
Fork 0
Files Issues 2 Pull Requests 0 Wiki
Labels Milestones
New Issue

#1 Mention risks with Market Place supply chain attacks?

Open
opened 1 year ago by dfr · 0 comments
François Damien commented 1 year ago

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters.

See this article for a general description of the risks associated with the Market Place and this one for a quantitative analysis.

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters. See [this article](https://www.developer-tech.com/news/2023/jan/09/visual-studio-marketplace-supply-chain-attack-vector/) for a general description of the risks associated with the Market Place and [this one](https://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors/) for a quantitative analysis.
Sign in to join this conversation.
Labels
Clear labels
No Label
Milestone
Clear milestone
No Milestone
Assignee
Clear assignee
No assignee
1 Participants
Write Preview
Loading...
Cancel
Save
There is no content yet.