this post was submitted on 28 Nov 2023
37 points (97.4% liked)

JavaScript

2321 readers
1 users here now

founded 2 years ago
MODERATORS
erlingur
Ategon
nick
37
$20k Bounty was Claimed! · Prettier (prettier.io)
submitted 1 year ago by lysdexic to c/javascript
7 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] Colloidal 1 points 1 week ago (1 children)

In case someone stumbles upon this now, Prettier got caught running a crypto miner on users' computers: https://programming.dev/post/28214590

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago) (1 children)

A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools

Real one has way more installs?

https://marketplace.visualstudio.com/items?itemName=esbenp.prettier-vscode

[–] Colloidal 2 points 1 week ago

Well spotted. https://securityonline.info/malicious-vscode-extensions-caught-mining-crypto-with-xmrig/ This news article has a link to this listing: https://app.extensiontotal.com/report/prettierteam.prettier

Notably, the developer name is different.