# malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs: Malicious AI Assistant Extensions Harvest LLM Chat Histories from VS Code

> Malicious AI Assistant Extensions Harvest LLM Chat Histories from VS Code is a high-severity data exfiltration issue in Multiple malicious VS Code extensions, an IDE extension. Affected: Multiple malicious VS Code extensions (various publishers).

- **Canonical URL:** https://catalog.anomity.ai/vuln/malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs
- **Aliases:** ti-017
- **Severity:** high
- **Attack type:** Data exfiltration
- **Component:** Multiple malicious VS Code extensions (IDE extension)
- **Catalog entry:** https://catalog.anomity.ai/agent/vscode
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-04-03
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs

## Summary

Microsoft Security researchers identified malicious VS Code extensions masquerading as AI coding assistants that silently harvest LLM conversation histories, including code snippets, API keys, and proprietary logic discussed in chat. The extensions use obfuscated telemetry endpoints to exfiltrate data. The campaign builds on earlier MaliciousCorgi findings where extensions with 1.5M+ installs were found siphoning developer source code to external servers.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Multiple malicious VS Code extensions (various publishers) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run Multiple malicious VS Code extensions (various publishers).

## How do I fix it?

Audit installed VS Code extensions against known-good publisher lists. Remove extensions from unknown publishers. Enable extension publisher allowlists via Anomity policy. Monitor for unexpected outbound network requests from IDE processes.

## How do I find every machine running Multiple malicious VS Code extensions?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Multiple malicious VS Code extensions and which version, then enforce a policy on it.

## References

- article: https://www.microsoft.com/en-us/security/blog/2026/03/05/malicious-ai-assistant-extensions-harvest-llm-chat-histories/

## Related vulnerabilities

- [nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code](https://catalog.anomity.ai/vuln/nx-console-v18-95-0-malicious-vs-code-extension-harvests-claude-code) — critical
- [checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and](https://catalog.anomity.ai/vuln/checkmarx-supply-chain-compromise-malicious-vs-code-extensions-and) — critical
- [trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace](https://catalog.anomity.ai/vuln/trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace) — critical
- [CVE-2026-88066](https://catalog.anomity.ai/vuln/cve-2026-88066) — high
- [cryptographic-context-injection-an-encrypted-web-page-got-github](https://catalog.anomity.ai/vuln/cryptographic-context-injection-an-encrypted-web-page-got-github) — medium
- [salesbleed-zero-click-data-exfiltration-from-salesforce-agentforce-via](https://catalog.anomity.ai/vuln/salesbleed-zero-click-data-exfiltration-from-salesforce-agentforce-via) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=malicious-ai-assistant-extensions-harvest-llm-chat-histories-from-vs