VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

VSCode extensions run with full file system, network, and credential access. No sandbox. No capability manifest. No runtime enforcement. Dozens of malicious extensions have already shipped through the official marketplace, and the only defense most developers have is trust plus post-compromise detection. This is the same privilege boundary problem... Weiterlesen: VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent …