0.3.897 • Published 4 years ago

@vsliveshare/vscode-launcher-osx v0.3.897

Weekly downloads
-
License
MIT
Repository
-
Last release
4 years ago

Dependency Confusion Attack Distributed via VSCode

This project demonstrates dependency confusion attack via microsoft published vscode extensions.

Quick Start

  1. start dns server: yarn dialTone
  2. mimic installation postinstall script with yarn phoneHome (update nameServers in digger.ts to refer to the correct IP address. Remember to rebuild the project for this to work)