Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
APT42 phishing campaign SpearSpecter now deploys AI-generated lures and controls its TAMECAT backdoor through Telegram — and ...