Introducing Socket Scanning for VS Code Marketplace Extensions

If 2026 has shown us anything, it’s that the software supply chain doesn’t stop at the dependencies in your apps. It includes the tools your developers use to write, build, and ship code. VS Code extensions run inside an environment full of source code, credentials, and access to company infrastructure. A malicious extension can put all of that within an attacker’s reach. Today, we’re launching experimental support for scanning VS Code Marketplace extensions. This extends our proactive security…