Open VSX

Every compromised Open VSX package we track

5 packages on Open VSX, drawn from 3 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.

Only versions named by a public advisory are listed. Other versions of these packages are not implicated. Browse incidents