You must log in or # to comment.
In case someone stumbles upon this now, Prettier got caught running a crypto miner on users’ computers: https://programming.dev/post/28214590
A set of ten VSCode extensions on Microsoft’s Visual Studio Code Marketplace pose as legitimate development tools
Real one has way more installs?
https://marketplace.visualstudio.com/items?itemName=esbenp.prettier-vscode
Well spotted. https://securityonline.info/malicious-vscode-extensions-caught-mining-crypto-with-xmrig/ This news article has a link to this listing: https://app.extensiontotal.com/report/prettierteam.prettier
Notably, the developer name is different.