Marketplace Takeover: How We Could’ve Taken Over Every Developer Using a VSCode Fork; Putting Millions at Risk
Read our blog post

Featured

Koi Research

GreedyBear: 650 Attack Tools, One Coordinated Campaign

Tuval Admoni

,

,

August 8, 2025

Filter by

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Koi Research

SpyVPN: The Google-Featured VPN That Secretly Captures Your Screen

Lotan Sery

,

,

August 19, 2025

Koi Research

GreedyBear: 650 Attack Tools, One Coordinated Campaign

Tuval Admoni

,

,

August 8, 2025

Security Insights

Amazon’s AI Assistant Almost Nuked A Million Developer’s Production Environments

Idan Dardikman

,

,

July 25, 2025

Koi Research

Google and Microsoft Trusted Them. 2.3 Million Users Installed Them. They Were Malware.

Idan Dardikman

,

,

July 8, 2025

Koi Research

When Both Marketplaces Fall: The Cross-Platform Extension Malware Campaign

Amit Assaraf

,

,

July 2, 2025

Koi Research

FoxyWallet: 40+ Malicious Firefox Extensions Exposed

Yuval Ronen

,

,

July 2, 2025

Koi Research

Marketplace Takeover: How We Could’ve Taken Over Every Developer Using a VSCode Fork; Putting Millions at Risk

Oren Yomtov

,

,

June 26, 2025

Security Insights

Trust Me, I’m Local: Chrome Extensions, MCP, and the Sandbox Escape

Yuval Ronen

,

,

April 24, 2025

Koi Research

Mining in Plain Sight: The VS Code Extension Cryptojacking Campaign

Yuval Ronen

,

,

April 7, 2025

Security Insights

A Month Of Malware In The Chrome Web Store

Amit Assaraf

,

,

April 3, 2025

Koi Research

A Wolf in Dark Mode: The Malicious VS Code Theme That Fooled Millions

Amit Assaraf

,

Idan Dardikman

,

Oren Yomtov

February 26, 2025

Security Insights

When Chrome Extensions Turn Against Us: The Cyberhaven Breach and Beyond

Amit Assaraf

,

,

December 30, 2024

Security Insights

VSCode Extension Trivia: Real or Cake?

Amit Assaraf

,

,

December 18, 2024

Koi Research
Security Insights

6/6 | Uncover Hidden Risks: CISO’s Guide to Using ExtensionTotal API for Your Organization

Amit Assaraf

,

,

July 5, 2024

Koi Research
Security Insights

5/6 | Breaking the Internet: The Aftermath Of Our Research

Amit Assaraf

,

,

June 22, 2024

Koi Research
Security Insights

4/6 | Introducing ExtensionTotal: How to Assess Risk in VS Code Extensions

Amit Assaraf

,

,

June 6, 2024

Koi Research
Security Insights

3/6 | A Letter to Microsoft: Uncovering Design Flaws of Visual Studio Code Extensions

Amit Assaraf

,

,

June 3, 2024

Koi Research
Security Insights

2/6 | Exposing Malicious Extensions: Shocking Statistics from the VS Code Marketplace

Amit Assaraf

,

,

June 2, 2024

Koi Research
Security Insights

1/6 | How We Hacked Multi-Billion Dollar Companies in 30 Minutes Using a Fake VSCode Extension

Amit Assaraf

,

,

May 12, 2024