{"id":20858821,"url":"https://github.com/controlplaneio/research-vscode","last_synced_at":"2026-01-10T04:51:27.454Z","repository":{"id":246222609,"uuid":"809718754","full_name":"controlplaneio/research-vscode","owner":"controlplaneio","description":"Results of Kevin \u0026 Fabian's R\u0026D week on VSCode security","archived":false,"fork":false,"pushed_at":"2024-09-11T10:09:53.000Z","size":452,"stargazers_count":2,"open_issues_count":3,"forks_count":0,"subscribers_count":7,"default_branch":"main","last_synced_at":"2024-09-17T13:10:20.067Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/controlplaneio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-06-03T10:13:45.000Z","updated_at":"2024-09-17T09:27:16.000Z","dependencies_parsed_at":"2024-06-26T17:15:39.326Z","dependency_job_id":null,"html_url":"https://github.com/controlplaneio/research-vscode","commit_stats":null,"previous_names":["controlplaneio/research-vscode"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Fresearch-vscode","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Fresearch-vscode/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Fresearch-vscode/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Fresearch-vscode/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/controlplaneio","download_url":"https://codeload.github.com/controlplaneio/research-vscode/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225130752,"owners_count":17425506,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-18T04:47:39.575Z","updated_at":"2026-01-10T04:51:27.450Z","avatar_url":"https://github.com/controlplaneio.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# VSCode Extensions Research\n\nA repository for researching the security of Visual Studio Code extensions. It includes proof of concept code to demonstrate how an adversary can leverage a malicious extension to access local and remote systems.\n\n## Current Examples\n\n- [Steal Credentials Extension](./steal-credentials/)\n\n## Literature\n\n- [Abusing VSCode: From Malicious Extensions to Stolen Credentials (Part 1)](https://control-plane.io/posts/abusing-vscode-from-malicious-extensions-to-stolen-credentials-part-1/)\n- [Abusing VSCode: From Malicious Extensions to Stolen Credentials (Part 2)](https://control-plane.io/posts/abusing-vscode-from-malicious-extensions-to-stolen-credentials-part-2/)\n\n---\n\nWith ❤ from [ControlPlane](https://control-plane.io/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrolplaneio%2Fresearch-vscode","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcontrolplaneio%2Fresearch-vscode","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrolplaneio%2Fresearch-vscode/lists"}