Unverified80% confidenceFactTime unknown
历史上已有多起通过恶意VS Code扩展窃取开发者凭证的安全事件被报告
1
Sources
80%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe leaked 510,000 lines of code were downloaded, archived, and publicly analyzed by multiple developers before being deleted.73% similarUnverifiedVS Code扩展市场和npm生态中已多次出现伪装成实用工具的恶意插件事件，部分插件在后台静默窃取环境变量、SSH密钥和API凭证69% similarUnverifiedThe Codecov incident occurred in 2021, when attackers tampered with CI tool scripts to steal enterprise environment variables and keys at scale.67% similarUnverified2023年CircleCI数据泄露事件中，攻击者通过员工开发机上的凭证文件实现供应链级别的渗透，波及数千家企业66% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/20424API
curl https://kongchang.com/api/v1/knowledge/claims/20424MCP
get_claim(id=20424)