In case someone stumbles upon this now, Prettier got caught running a crypto miner on users' computers: https://programming.dev/post/28214590
this post was submitted on 28 Nov 2023
2 points (100.0% liked)
JavaScript
2367 readers
7 users here now
founded 2 years ago
MODERATORS
A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools
Real one has way more installs?
https://marketplace.visualstudio.com/items?itemName=esbenp.prettier-vscode
Well spotted. https://securityonline.info/malicious-vscode-extensions-caught-mining-crypto-with-xmrig/ This news article has a link to this listing: https://app.extensiontotal.com/report/prettierteam.prettier
Notably, the developer name is different.