{"id":"https://openalex.org/W7164515854","doi":"https://doi.org/10.1145/3800506.3803487","title":"VSMEx: A Collection Tool and a Dataset of Malicious VS Code Extensions: Data/Toolset Paper","display_name":"VSMEx: A Collection Tool and a Dataset of Malicious VS Code Extensions: Data/Toolset Paper","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W7164515854","doi":"https://doi.org/10.1145/3800506.3803487"},"language":null,"primary_location":{"id":"doi:10.1145/3800506.3803487","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803487","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3800506.3803487","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138531111","display_name":"Kotaiba Alachkar","orcid":"https://orcid.org/0009-0002-5138-3833"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Kotaiba Alachkar","raw_affiliation_strings":["TU Delft, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0009-0002-5138-3833","affiliations":[{"raw_affiliation_string":"TU Delft, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138526793","display_name":"Dirk Gaastra","orcid":"https://orcid.org/0009-0000-2586-3281"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dirk Gaastra","raw_affiliation_strings":["Independent Researcher, Amstelveen, Netherlands"],"raw_orcid":"https://orcid.org/0009-0000-2586-3281","affiliations":[{"raw_affiliation_string":"Independent Researcher, Amstelveen, Netherlands","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068415784","display_name":"Olga Gadyatskaya","orcid":"https://orcid.org/0000-0002-3760-9165"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Olga Gadyatskaya","raw_affiliation_strings":["Leiden University, Leiden, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-3760-9165","affiliations":[{"raw_affiliation_string":"Leiden University, Leiden, Netherlands","institution_ids":["https://openalex.org/I121797337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089240717","display_name":"Eduardo B\u00e1rbaro","orcid":"https://orcid.org/0000-0001-7878-2514"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Eduardo Barbaro","raw_affiliation_strings":["TU Delft, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0001-7878-2514","affiliations":[{"raw_affiliation_string":"TU Delft, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012946294","display_name":"Michel van Eeten","orcid":"https://orcid.org/0000-0002-0338-2812"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Michel van Eeten","raw_affiliation_strings":["TU Delft, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-0338-2812","affiliations":[{"raw_affiliation_string":"TU Delft, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000936454","display_name":"Yury Zhauniarovich","orcid":"https://orcid.org/0000-0001-9116-0728"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Yury Zhauniarovich","raw_affiliation_strings":["TU Delft, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0001-9116-0728","affiliations":[{"raw_affiliation_string":"TU Delft, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.73132414,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"138","last_page":"144"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.29980000853538513,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.29980000853538513,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.11379999667406082,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0869000032544136,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5555999875068665},{"id":"https://openalex.org/keywords/data-collection","display_name":"Data collection","score":0.3939000070095062},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.28700000047683716},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.28459998965263367},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.26579999923706055}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.689300000667572},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5555999875068665},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.3939000070095062},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.304500013589859},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28859999775886536},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.28380000591278076},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2639999985694885}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3800506.3803487","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803487","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3800506.3803487","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803487","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2407313496","https://openalex.org/W3011333502","https://openalex.org/W3046453918","https://openalex.org/W3112311055","https://openalex.org/W3138230581","https://openalex.org/W3177627266","https://openalex.org/W4319442612","https://openalex.org/W4388502419","https://openalex.org/W4390317718","https://openalex.org/W4398183551","https://openalex.org/W4400242158"],"related_works":[],"abstract_inverted_index":{"Visual":[0],"Studio":[1],"Code":[2,64,80,160],"(VS":[3],"Code)":[4],"is":[5],"one":[6],"of":[7,77,94,107,118,130,157],"the":[8,105,119,124,128,146,155,158,169],"most":[9],"widely":[10],"used":[11],"code":[12],"editors,":[13],"and":[14,29,43,87,122,127,152,176],"its":[15],"extension":[16],"ecosystem":[17],"has":[18],"increasingly":[19],"become":[20],"a":[21,73,91],"target":[22],"for":[23,61,174],"software":[24],"supply":[25],"chain":[26],"attacks.":[27],"Developing":[28],"validating":[30],"effective":[31],"detection":[32],"techniques":[33],"in":[34,178],"this":[35,68,111,137],"area":[36],"requires":[37],"ground-truth":[38],"data":[39],"with":[40],"both":[41],"benign":[42,47],"malicious":[44,62,78,86],"samples.":[45],"While":[46],"samples":[48],"are":[49],"easy":[50],"to":[51,145,154,166],"obtain,":[52],"no":[53],"publicly":[54],"available":[55],"or":[56,132],"continuously":[57,74],"updated":[58,75],"dataset":[59,76,121,147,171],"exists":[60],"VS":[63,79,159],"extensions.":[65],"To":[66],"address":[67],"gap,":[69],"we":[70,113,141],"built":[71],"VSMEx,":[72],"extensions":[81,134],"derived":[82],"from":[83],"Microsoft's":[84],"official":[85],"removed":[88,133],"lists.":[89],"Over":[90],"deployment":[92],"period":[93],"more":[95],"than":[96],"three":[97],"months,":[98],"VSMEx":[99,164],"successfully":[100],"captured":[101],"214":[102],"extensions,":[103],"demonstrating":[104],"viability":[106],"our":[108],"approach.":[109],"In":[110,139],"work,":[112],"present":[114],"an":[115],"initial":[116],"analysis":[117],"resulting":[120,170],"share":[123],"associated":[125],"metadata":[126],"list":[129],"flagged":[131],"collected":[135],"during":[136],"period.":[138],"addition,":[140],"provide":[142],"controlled":[143],"access":[144],"itself,":[148],"facilitating":[149],"further":[150],"research":[151],"contributing":[153],"security":[156],"ecosystem.":[161],"Note":[162],"that":[163],"continues":[165],"operate,":[167],"making":[168],"well":[172],"suited":[173],"training":[175],"validation":[177],"continuous":[179],"machine":[180],"learning":[181],"settings.":[182]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-06-13T00:00:00"}