# Open VSX Removes 77 Malicious Extensions Stealing Developer Data

Open VSX, a prominent open-source extension registry, removed 77 malicious "evil twin" extensions that imitated legitimate tools to exfiltrate developer data. The campaign targeted developers by tricking them into installing compromised packages, potentially exposing credentials and sensitive information. This incident underscores the ongoing security risks within open-source marketplaces.

**Importance:** 3/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html) — Wed, 05 Aug 2026 14:53:03 +0530