📙 Hunting Malicious IDE Extensions: Building Detection at Scale Across Developer Workstations 🔥

No ratings

Presented at BSides SF 2026 by

Vinod Tiwari

Developer machines run IDE extensions with extensive permissions to access credentials, source code, and production systems. This talk presents a practical detection system to inventory extensions across VS Code, Cursor, and JetBrains IDEs, maintain an allowlist, and alert on threats in real-time.