vscode
MaliciousJScearcy.rust-doc-viewer@4.2.1
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 10:42 AM UTC
OSV ID
MAL-2025-191164
Ecosystem
vscode
Summary
This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency wallets. The extension also provides remote access and attempts to propagate itself.
Source: google-open-source-security (1dbdd73bf66fbfde48d73e86ebfbb11ca8bb6f44ff57a5030596fc189f962ddf)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.