Breaches and incidentsBriefPublic record
Open VSX and VS Code Marketplace leaked publisher tokens
Wiz found 550+ secrets in published extensions, including publisher PATs that could push malicious updates.
- Disclosed
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.