Cybersecurity researchers have uncovered a severe vulnerability in the Open VSX Registry that could have allowed attackers to compromise the entire Visual Studio Code extensions marketplace, creating a massive supply chain security risk.

## The Threat Landscape

The vulnerability, discovered by Koi Security researcher Oren Yomtov, would have given malicious actors complete control over the extensions marketplace and, consequently, millions of developer machines worldwide. “By exploiting a CI issue, a malicious actor could publish malicious updates to every extension on Open VSX,” Yomtov explained.

## What is Open VSX Registry?

Open VSX Registry (open-vsx.org) serves as an open-source alternative to the Visual Studio Marketplace, maintained by the Eclipse Foundation. The platform has gained widespread adoption among popular code editors including:

– Cursor
– Windsurf
– Google Cloud Shell Editor
– Gitpod
– Various other development environments

This extensive integration makes Open VSX a critical component in the developer ecosystem, with every extension installation and update flowing through the platform.

## The Vulnerability Details

The security flaw originated in the publish-extensions repository, which contains scripts for publishing open-source VS Code extensions. The process works as follows:

1. Developers submit pull requests to add extensions to the extensions.json file
2. After approval, a GitHub Actions workflow runs daily at 03:03 UTC
3. The workflow uses privileged credentials, including a secret token (OVSX_PAT) from the @open-vsx service account

The critical issue arose because the npm install process executed arbitrary build scripts from auto-published extensions and their dependencies while providing access to the OVSX_PAT environment variable. This exposure could allow attackers to obtain the @open-vsx account token, granting them the ability to publish new extensions or modify existing ones with malicious code.

## Timeline and Resolution

– **May 4, 2025**: Vulnerability responsibly disclosed
– **Multiple rounds**: Fixes proposed by maintainers
– **June 25**: Final patch successfully deployed

## Growing Security Concerns

The threat posed by IDE extensions has gained recognition from cybersecurity authorities. MITRE recently added “IDE Extensions” as a new technique in its ATT&CK framework in April 2025, acknowledging how malicious actors can exploit these tools to maintain persistent access to victim systems.

## Expert Analysis

“Every marketplace item is a potential backdoor,” Yomtov warned. “They’re unvetted software dependencies with privileged access, and they deserve the same diligence as any package from PyPI, npm, Hugging Face, or GitHub. If left unchecked, they create a sprawling, invisible supply chain that attackers are increasingly exploiting.”

This incident highlights the critical importance of securing software supply chains, particularly in development environments where extensions have elevated privileges and widespread distribution capabilities.