✉news TechnologySoftware first seen 1 d ago, last 1 d ago, peak #29
Fail-Open Bug in Open VSX Scanner Let Malware Through
Original: Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In
A newly disclosed security flaw in the Open VSX extension registry's malware scanner worked in fail-open mode, meaning that when the scanner errored or timed out, extensions were approved rather than blocked. Palo Alto Networks researchers detailed how malicious extensions could slip past the review process and reach developers' systems, raising concerns about supply chain security in open-source tooling.
Why now: The disclosure highlights a real supply chain risk affecting developers who rely on Open VSX extensions.
Open VSXEclipse FoundationPalo Alto Networks
Evidence
- Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In · Palo Alto Networks
API: https://socialmediatrends-api.osmike.com/v1/trends/2069280