Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Eclipse Foundation will introduce pre-publish security checks for the Open VSX Registry to proactively block malicious or unsafe VS Code extensions, focusing on issues like namespace impersonation, leaked secrets, and known malicious patterns. Rolled out in stages during February 2026 for monitoring and tuning before enforcement next month, the effort aims to reduce supply chain risk, narrow exposure windows, and align with Microsoft’s vetting approach for the Visual Studio Marketplace.