Visual Studio Code extensions security vulnerabilities

This repository contains vulnerable versions of Visual Studio Code extensions and the exploits.

Publications

• Snyk uncovers supply chain security vulnerabilities in Visual Studio Code extensions
• Deep dive into Visual Studio Code extension security vulnerabilities

Exploits

• LaTeX Workshop 8.16.1
• Open In Default Browser 2.1.3
• Instant Markdown 1.4.6
• Rainbow Fart 1.4.0