VSCode Supply Chain Compromise: 12 Malicious Extensions Steal Source Code and Open Remote Shells

The HelixGuard Threat Intelligence Team has uncovered a widespread supply chain compromise in the Visual Studio Code extension marketplace, identifying at least 12 malicious plugins, four of which remained live at discovery. These extensions were found to steal source code, exfiltrate credentials, capture screenshots, and even open remote shells on developers’ machines.

The extensions—hosted on both the official Microsoft VSCode Marketplace and OpenVSX—target developers using AI-assisted coding and DevOps tools, illustrating a broader trend of IDEs being exploited as a supply chain infiltration vector. According to HelixGuard, arXiv research titled “Developers Are Victims Too: A Comprehensive Analysis of the VS Code Extension Ecosystem” found that approximately 5.6% (2,969) of 52,880 extensions exhibit suspicious behaviour, with these extensions accruing 613 million installs.

Notable plugins include Christine-devops1234[.]scraper, Kodease[.]fyp-23-s2-08, teste123444212.teste123444212, ToToRoManComp[.]diff-tool-vsc, BX-Dev[.]Blackstone-DLP, and others, some performing data and clipboard gathering, reverse shells, or remote backdoors.

HelixGuard warns that such IDE malware can serve as initial access points into corporate networks and pose serious risks to DevOps pipelines and AI-assisted codebases, urging enterprise security teams to take IDE-level threats seriously. according to HelixGuard.