OX Security's research reveals critical flaws in the verification processes of popular IDEs like Visual Studio Code, Visual Studio, and IntelliJ IDEA, allowing malicious extensions to appear verified. These vulnerabilities can lead to arbitrary code execution on developers' machines, underscoring the need for improved security measures in extension signing and installation practices.
ide ✓
security ✓
vulnerabilities ✓
+ extensions
verification ✓