Fake AI coding assistants for VS Code, disguised as ChatGPT extensions, infected over 1.5 million developers with spyware.
Fake error popups now trick people into running malware themselves. A new tool makes these attacks faster and harder to detect.