@vsliveshare/vscode-launcher-osx v0.3.897

Dependency Confusion Attack Distributed via VSCode

This project demonstrates dependency confusion attack via microsoft published vscode extensions.

Quick Start

1. start dns server: yarn dialTone
2. mimic installation postinstall script with yarn phoneHome (update nameServers in digger.ts to refer to the correct IP address. Remember to rebuild the project for this to work)