shadow-ninja

The extension chatgpt-china by WhenSunset was flagged by vscan.dev as critical risk since the trojan.corgi/malcorgi threatw as detected. The extension has 1.3 million users, posing a significant risk to each individual.

Microsoft only started really cracking down on malicious extensions relatively recently (<1 year ago).

Despite their best efforts, the marketplace is getting increasingly dangerous. The list published here is of malicious extensions that were discovered only after allowing them free reign on the marketplace - imagine how many are still out there.

I published a paper to solve the "unrestricted access" dangerous VSCode Extensions have.

The paper outlines a 3-part automated system: 1. Risk profile VS Code Extensions 2. Generate per-extension sandboxing policies automatically 3. Enforce sandboxing at runtime without disrupting existing system

The goal was an extremely low-profile system that doesn't require additional software. This could be an important asset in the increasingly dangerous and unregulated VSCode extension ecosystem.

Btw, the risk-profiling section is an evolution of my free extension scanner vscan.dev. If you any questions about vscan.dev, you can reach out at [email protected].