BLOG TAG
vscode-extensions
1 post on this topic. For the full archive, see the security blog. Comparison writes-ups live on Why Puaro and the methodology page.
All posts
Supply Chain Security8 min readNov 01, 2025
How AI-Powered Scanning Prevents the Next 'GlassWorm' Supply Chain Attack
The recent GlassWorm incident exposed critical vulnerabilities in the software supply chain when developers accidentally leaked VS Code extension tokens. Learn how AI-powered scanning provides proactive prevention beyond simple pattern matching.