BSidesSF 2026 - Hunting Malicious IDE Extensions: Building Detection at Scale... (Vinod Tiwari)

This talk, presented by Vinod Tiwari, focuses on the security risks posed by malicious IDE extensions that run on developer machines. The speaker discusses a practical detection system designed to inventory extensions across popular IDEs such as VS Code, Cursor, and JetBrains. By maintaining an allowlist and providing real-time alerts on potential threats, this session addresses the critical need to safeguard sensitive credentials, source code, and production systems from vulnerability.