Fake Open VSX Extensions Harvest Private Repo and CI Data

Infosecurity Magazine feed covering active cyber threats, vulnerabilities, data breaches, phishing and malware campaigns, software supply-chain compromises, ransomware, cloud and identity attacks, and emerging AI security risks. Highlights include malicious Open VSX and npm extensions, unauthenticated Paperclip AI command execution, phishing-enabled remote access, WhatsApp account hijacking, rapid exploitation of newly disclosed vulnerabilities, loader evasion, Linux privilege escalation, and malicious model repositories. Several reports describe high-impact incidents affecting organizations,—