VS Code Forks OpenVSX Extension Recommendations Supply Chain Risk
Date: 2026-01
Affected: VS Code Forks OpenVSX Extension Recommendations Supply Chain Risk
Attack vector: supply-chain
Category: real-world
Severity: Medium

AI-powered IDEs (Cursor, Windsurf, Google Antigravity, Trae) forked from VS Code inherit hardcoded recommended extension lists pointing to VS Code Marketplace. These IDEs use OpenVSX, where those extension namespaces were unclaimed. Attackers could register them and publish malware that users would install via built-in recommendations.


Mitigations:

Architectural layers (MAESTRO):