Post

Nick Frichette
@frichetten.com

A malicious VS Code extension was reportedly enough to compromise a GitHub employee device and expose internal repositories. That should make every security team ask: What’s running inside our developers’ IDEs? github.com/DataDog/IDE-...

github.comGitHub - DataDog/IDE-SHEPHERD-extension: A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDEA VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE - DataDog/IDE-SHEPHERD-extension
Nick Frichette
@frichetten.com

VS Code extensions have broad access, update frequently, and often run with more trust than they deserve. Datadog Security Research has been tracking this attack surface for a while, and IDE Shepherd is one way we’re helping teams respond.

Nick Frichette
@frichetten.com

It monitors VS Code and Cursor extension behavior at runtime and blocks suspicious activity from malicious or compromised extensions.

0 reposts0 likes

No replies yet.