# Malicious Microsoft VSCode AI extensions might have hit over 1.5 million users

> Two VSCode extensions exfiltrated sensitive user data to Chinese servers ChatGPT – 中文版 and ChatMoss had over 1. 5 million installs combined Extensions used hidden iframes, commands, and SDKs to steal files and track…

- **Source:** [TechRadar](https://www.techradar.com/pro/security/malicious-microsoft-vscode-ai-extensions-might-have-hit-over-1-5-million-users?utm_source=gearopen.com&utm_medium=referral&utm_campaign=feed&utm_content=6977dd908ff7c5d2aeba6f36)
- **Published:** 2026-01-26
- **Category:** AI & Bots
- **Tags:** #ai #microsoft #chatgpt #extensions #million #vscode #malicious #chinese
- **Canonical:** http://localhost:4321/a/6977dd908ff7c5d2aeba6f36

---

_GearOpen's distilled summary. The full original article is published at TechRadar (source link above); GearOpen does not republish the source's full text._