🚨 Verified? Think again.

Malicious extensions can pose as trusted in VS Code, IntelliJ, Visual Studio & #Cursor—bypassing checks and running OS commands.

The “verified” badge isn’t protection. Even Microsoft’s filters missed it.

Full details → https://thehackernews.com/2025/07/new-flaw-in-ides-like-visual-studio.html