
- Two VSCode extensions exfiltrated sensitive user data to Chinese servers
- ChatGPT – 中文版 and ChatMoss had over 1.5 million installs combined
- Extensions used hidden iframes, commands, and SDKs to steal files and track activity
More than 1.5 million people may have had their sensitive data exfiltrated to Chinese hackers through two malicious extensions found on the VSCode Marketplace.