Post

A malicious VS Code extension was reportedly enough to compromise a GitHub employee device and expose internal repositories. That should make every security team ask: What’s running inside our developers’ IDEs? github.com/DataDog/IDE-...

github.comGitHub - DataDog/IDE-SHEPHERD-extension: A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDEA VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE - DataDog/IDE-SHEPHERD-extension

Nick Frichette

@frichetten.com

VS Code extensions have broad access, update frequently, and often run with more trust than they deserve. Datadog Security Research has been tracking this attack surface for a while, and IDE Shepherd is one way we’re helping teams respond.

20/5/26, 3:41 pm0 reposts0 likes

Nick Frichette

@frichetten.com

20 May

It monitors VS Code and Cursor extension behavior at runtime and blocks suspicious activity from malicious or compromised extensions.