Counterfeit AMD/Azure/Salesforce Open VSX Extension Installed (v0.0.1/0.0.2)

Duo Tech@duotech

•updated Aug 5, 2026•1•0•3

Detects installation of malicious "evil twin" Open VSX extensions impersonating AMD, Azure, or Salesforce that carry the tell-tale version 0.0.1 or 0.0.2, identified via file creation/write events in VS Code / Open VSX extension directories.