# Knostic Research Team Blog ## [SaassyCode Repackaged: Four New VS Code Extensions and a New Delivery Chain](/content/blog/saassycode-repackaged-four-new-vs-code-extensions-and-a-new-delivery-chain/index.html) Knostic identified four VS Code extensions that reuse malicious code from the SaassyCode family. They reveal two distinct forms of reuse: one package ... 24 August 2026 [Read more ### [Analyzing Two Malicious VS Code Extensions Hidden Behind a WordPress Tool](/content/blog/analyzing-two-malicious-vs-code-extensions-hidden-behind-a-wordpress-tool/index.html) Two VS Code extensions, published within days of each other, both marketed themselves as WordPress d... 21 July 2026 [research findings](/content/blog/tag/research-findings/index.html) ### [The Source Looked Clean. The Binary Wasn't.](/content/blog/the-source-looked-clean-the-binary-wasnt/index.html) Sample api-reactor.vsix — NoahBit.api-reactor v0.0.1 SHA-256 ca272b481f630635cd059f85321dbc7be372e75... 29 June 2026 [research findings](/content/blog/tag/research-findings/index.html) ### [Revoking Your Token Won't Save You: The VS Code Attack That Installs a Permanent GitHub Backdoor](/content/blog/revoking-your-token-wont-save-you-the-vs-code-attack-that-installs-a-permanent-github-backdoor/index.html) The Attack That Survives Your Response When a developer discovers a compromised VS Code extension, t... 15 June 2026 [research findings](/content/blog/tag/research-findings/index.html) ### [SaassyCode Post-Disclosure Wave: Five New Extensions, 32,000+ Total Installs](/content/blog/saassycode-post-disclosure-wave-five-new-extensions-32000-total-installs/index.html) Previous post:Update and Infect: How the SaassyCode Campaign Grew from Two Extensions to Nineteen → 11 June 2026 [research findings](/content/blog/tag/research-findings/index.html) ### [AI Coding Agent Governance Policies That Work](/content/blog/ai-coding-agent-governance/index.html) Fast Facts on AI Coding Agent Governance AI coding agent governance refers to the rules, roles, and ... 2 December 2025 [AI data security](/content/blog/tag/ai-data-security/index.html)