BleepingComputer reports that malicious extensions could facilitate the theft of Windows, macOS, and Linux credential manager-stored authentication tokens using a vulnerability in the Microsoft Visual Studio Code editor and development environment. Cycode researchers have leveraged the flaw, which stems from the absence of authentication token isolation in VS Code’s “Secret Storage”

Source: SC Magazine