VSCode extensions with 9M installs pulled over security risks

Luckily I can’t stand Material themes so I’m all good!

Discussion: https://news.ycombinator.com/item?id=43178831

Thanks! Macro-expanded:

Material Theme has been pulled from VS Code's marketplace

https://news.ycombinator.com/item?id=43178831 (Yesterday, 393 comments)

I think it's quite funny theme extensions even get to run code on the client. Soon: prudent CTOs ban all editors, devs forced to used nano

There does look to be some malicious code.

I uploaded the code to pastebin.

https://pastebin.com/H5QjS4Bt

> A partial deobfuscation of the code showed numerous references to usernames and passwords. However, as the file was still heavily obfuscated, BleepingComputer could not determine in what way they were being referenced.

I thought ChatGPT was supposed to deofuscate js. Anyone give it a whirl?