It’s easy to become numb to stories about hackers and data breaches. But I got the wakeup call everybody dreads.
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.