AI-Slop ransomware test sneaks on to VS Code marketplace

A malicious VS Code extension named 'susvsex' was published on Microsoft's official marketplace and openly advertised file-theft and AES-256-CBC encryption in its description. The extension zips target files, exfiltrates them to a hardcoded C2, replaces files with encrypted versions, and polls a GitHub repo via a hardcoded PAT for commands; researchers characterized it as AI-generated and unsophisticated but potentially dangerous, and reported it to Microsoft who initially did not remove it.