keyv npm Supply Chain Attack Hides Malware in AI Agent Files Scanners Never Read Tech Times

77 Evil Twin Open VSX Extensions Exfiltrate Private Git Repository and CI Data
A wave of counterfeit Open VSX extensions has exposed how easily a familiar developer tool can become a data collection channel. Seventy-seven packages copied the


