Skip to content

// #extensions

1 article

🔬 Assessment

Auditing VS Code Extensions for Supply-Chain Risk: A Practical Assessment Guide

The Nx Console supply-chain compromise in TeamPCP's May 2026 campaign targeted an extension with millions of downloads. With over 60,000 extensions in the VS Marketplace, most organisations have no inventory of which extensions their developers run. This guide covers extension auditing, publisher verification, and policy controls.

#vs-code +6