{
  "entry": {
    "kind": "vuln",
    "slug": "vscode-fork-recommended-extension-namespace-squatting-supply-chain",
    "name": "vscode-fork-recommended-extension-namespace-squatting-supply-chain",
    "vendor": "Cursor",
    "description": "AI-powered IDEs forked from VS Code (Cursor, Windsurf, Google Antigravity, Trae) inherit Microsoft's hardcoded extension recommendation lists but pull from OpenVSX, where many recommended namespaces were unclaimed. Any attacker could register those namespaces and serve malicious payloads as \"officially recommended\" installs. Koi Security disclosed the issue; campaigns exploiting similar gaps infected 17,000+ developers.",
    "website": "https://thehackernews.com/2026/01/vs-code-forks-recommend-missing.html",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "ide-extension",
    "updatedAt": "2026-01-22",
    "risk": {
      "score": 75,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "vscode-fork-recommended-extension-namespace-squatting-supply-chain",
      "aliases": [
        "ti-009"
      ],
      "title": "VSCode Fork \"Recommended Extension\" Namespace Squatting Supply Chain Attack",
      "summary": "AI-powered IDEs forked from VS Code (Cursor, Windsurf, Google Antigravity, Trae) inherit Microsoft's hardcoded extension recommendation lists but pull from OpenVSX, where many recommended namespaces were unclaimed. Any attacker could register those namespaces and serve malicious payloads as \"officially recommended\" installs. Koi Security disclosed the issue; campaigns exploiting similar gaps infected 17,000+ developers.",
      "severity": "high",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise"
      ],
      "componentType": "ide-extension",
      "component": {
        "name": "Cursor",
        "vendor": null,
        "package": null,
        "ecosystem": "vscode",
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Cursor, Windsurf, Trae (all VSCode forks using OpenVSX)",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-01-22",
      "modifiedAt": "2026-01-22",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://thehackernews.com/2026/01/vs-code-forks-recommend-missing.html"
        }
      ],
      "mitigation": "Review installed extensions against known-good publishers. Block auto-install of recommended extensions. Use publisher allowlists in your extension policy.",
      "detectedByAnomity": true
    }
  }
}