RBlind
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Beep@lemmus.org to Technology@lemmy.worldEnglish · 20 天前

Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs

www.koi.ai

external-link
message-square
7
link
fedilink
  • cross-posted to:
  • cybersecurity@sh.itjust.works
86
external-link

Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs

www.koi.ai

Beep@lemmus.org to Technology@lemmy.worldEnglish · 20 天前
message-square
7
link
fedilink
  • cross-posted to:
  • cybersecurity@sh.itjust.works
Two popular AI coding extensions with 1.5M installs secretly harvest your entire codebase and profile you. Both are still live in the marketplace.
alert-triangle
You must log in or # to comment.
  • TheOneCurly@feddit.online
    link
    fedilink
    English
    arrow-up
    42
    arrow-down
    1
    ·
    20 天前

    We install them without a second thought.

    Do we?

  • Naich@lemmings.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    1
    ·
    20 天前

    Ha ha. Good luck getting anything useful out of the dog shit code I write.

  • certified_expert@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    20 天前

    Laughs in emacs…

    • 6nk06@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      6
      ·
      20 天前

      You won’t laugh anymore when North Korean hackers start to learn the weird Lisp variant that Emacs uses. Your RAM will be filled with vibe-coded macros stealing your bitcoins.

      • certified_expert@lemmy.world
        link
        fedilink
        English
        arrow-up
        14
        ·
        20 天前

        Jokes on them. I don’t have either bitcoins or ram

  • MasterBlaster@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    20 天前

    Damn, I took a quick look and I knew those two were shady just by the names and publishers.

  • devfuuu@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    20 天前

    Good good, let it flow.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 4.01K users / day
  • 11.1K users / week
  • 17.8K users / month
  • 30.5K users / 6 months
  • 5 local subscribers
  • 81.7K subscribers
  • 4.94K Posts
  • 234K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org