GCVE-110-OSM-2026-10412

Suspicious package detected. Microsoft removal context: Extension ID: KhoaZero123.sftp-extension Publisher: KhoaZero123 Removal Date: 7/31/2026 Violation Type: impersonation Removed from the VS Code Marketplace by Microsoft for violating marketplace policies. Source: https://github.com/microsoft/vsmarketplace/blob/main/RemovedPackages.md GitHub exposure: 10 public file(s) on GitHub reference this extension (e.g. .vscode/extensions.json recommendations, devcontainer configs, or docs). These repositories may be distributing or recommending the removed extension: - mthcht/awesome-lists: Lists/VSCODE Extensions/feeds/ioc_all_extension_ids.txt - mthcht/awesome-lists: Lists/VSCODE Extensions/feeds/ioc_high_risk_extension_ids.txt - microsoft/vsmarketplace: RemovedPackages.md - nix-community/nix4vscode: data/openvsx/data_75.json - vsxsentry/vsxsentry.github.io: feeds/ioc_all_extension_ids.txt - vsxsentry/vsxsentry.github.io: feeds/ioc_high_risk_extension_ids.txt - vsxsentry/vsxsentry.github.io: feeds/vsxsentry_opencti_import.csv - vsxsentry/vsxsentry.github.io: feeds/vsxsentry_misp_warninglist.json - vsxsentry/vsxsentry.github.io: feeds/vsxsentry_sentinel_watchlist.csv - kalachkar/vsmex: metadata/msft_vscode_flagged_extensions.csv