Supply Chain Risks in Popular AI-Powered IDEs: A Case Study

In the rapidly evolving world of software development, open-source tools have become indispensable. Among these, the Microsoft Visual Studio Code (VS Code) and its forks have gained immense popularity, especially in the North East region of India. However, a recent security concern has surfaced, highlighting potential risks in the supply chain of these AI-powered Integrated Development Environments (IDEs).

The Missing Extensions: A Loophole for Malicious Actors

Researchers from Koi have discovered that popular VS Code forks such as Cursor, Windsurf, Google Antigravity, and Trae are recommending extensions that do not exist in the Open VSX registry. This oversight could allow malicious actors to publish malicious packages under these names, exploiting the trust developers place in these tools.

The Inherited Extension List

These extension recommendations can take two forms: file-based, displayed as toast notifications when users open files in specific formats, or software-based, suggested when certain programs are already installed on the host. The issue lies in the fact that these recommended extensions do not exist in Open VSX, leaving their namespaces unclaimed, enabling anyone to register and upload whatever they want.

The Implication: A Potential Threat to Developers

An attacker could weaponize this absence of VS Code extensions and the fact that these AI-powered IDEs are VS Code forks to upload a malicious extension to the Open VSX registry. For instance, a malicious "PostgreSQL extension" could be uploaded, potentially leading to the theft of sensitive data, including credentials, secrets, and source code.

The Unwitting Installs: Trusting the Wrong Source

In a concerning incident, Koi's placeholder PostgreSQL extension attracted no less than 500 installs, indicating that developers are roving installs without verifying they come from a trusted publisher. This simple act of trust can have severe consequences.

Reflections and Looking Forward

As developers in the North East region of India and across India continue to rely on these AI-powered IDEs, it is crucial to be aware of the potential risks in the supply chain. Developers must exercise caution when installing extensions and verify their sources to protect their sensitive data. The security community must also continue to monitor and address such vulnerabilities to ensure the safety and integrity of our open-source tools.