How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Open VSX Unblocks Extension IDs Used in Malware Campaign

calendar_today August 24, 2026 person Sarah Gooding domain socket

Over a five-day period from August 16 through August 20, the registry unblocked AlDuncanson.react-hooks-snippets , magne-sjaastad.opm-flow-editor-support , and rumbledb.jsoniq-vscode . All three IDs had been used by impostors in the 77-extension evil-twin campaign documented by Manifold Security earlier this month. Legitimate versions of the OPM and RumbleDB extensions are now live.

open_in_new Read original post