Malicious VS Code extension 'ascii-fetcher' installed with jsononifier dependency

Ethan Andrews@eandrews

•updated Jul 6, 2026•0•0•4

Detects file system artifacts indicating installation of the malicious 'ascii-fetcher' VS Code extension (v1.0.0) from the Open VSX marketplace, which bundles the malicious npm dependency '@jaymara/jsononifier' to hide its logic from static analysis.