Malware Discovered in 19 Visual Studio Code Extensions

ReversingLabs uncovered a campaign of 19 malicious VS Code extensions that hid malware inside dependency folders by using a modified npm package (path-is-absolute) and disguised payloads (a banner.png archive containing binaries) executed via cmstp.exe; the operation deployed a JavaScript dropper and a Rust-based Trojan and employed alternate techniques involving @actions/io, prompting recommendations to inspect extensions, audit dependencies, and use behavioral security tooling.