Tag

publisher-tokens

Safeguard articles tagged "publisher-tokens" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Security

IDE extension marketplace trust and verification

Wiz Research found 550+ leaked secrets across 500+ VS Code extensions, including publisher tokens that let attackers push malicious updates to entire install bases.

Jul 10, 20266 min read