Malicious Axqua Extension Discovered in Visual Studio Code Marketplace
Security analysts have identified the Axqua extension for Visual Studio Code as malware capable of stealing credentials and executing unauthorized background tasks.
Visual Studio Code users have a security risk on their hands with the Axqua extension, which analysts flag as malware that can access system files, environment variables, and stored credentials while executing unauthorized background tasks with user-level permissions.
If you have Axqua installed, remove it immediately.
After you pull it from your system, you need to audit your machine. Rotate any API keys, cloud provider tokens, and SSH keys that were on the system while the extension was active. You should also check network logs for unusual outbound traffic during your development sessions to spot potential data exfiltration.
Third-party extensions in integrated development environments present ongoing challenges because malicious tools often masquerade as legitimate productivity utilities. You should always review requested permissions and limit tools that lack a transparent development history.