{"id":255773,"date":"2025-11-01T16:16:09","date_gmt":"2025-11-01T16:16:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/255773\/"},"modified":"2025-11-01T16:16:09","modified_gmt":"2025-11-01T16:16:09","slug":"pokemon-vibe-code-attack-warning-issued-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/255773\/","title":{"rendered":"Pokemon Vibe Code Attack Warning Issued \u2014 What You Need To Know"},"content":{"rendered":"

\"Pok\u00e9mon<\/p>\n

Beware these vibe coded Pokemon themes.<\/p>\n

SOPA Images\/LightRocket via Getty Images<\/p>\n

So far this month, I have reported on active Windows hack attacks<\/a>, 300 million stolen credentials that are being traded on the dark web<\/a>, and a magic code<\/a> that just might save you a fortune if your smartphone gets stolen. What I didn\u2019t expect to be writing about, as a cybersecurity geek, was Pokemon. Or, for that matter, vibe coding, as neither exactly floats my professional interest boat. But here we are, and here\u2019s the news that vibe coders are abusing the AI-powered programming sensation to create malware posing as, among other things, Pokemon coding themes. Here\u2019s what you need to know. <\/p>\n

ForbesPayPal Attack Update: Another \u2018Do Not Pay\u2019 Warning IssuedBy Davey Winder<\/a>The Pokemon Vibe Coding Theme That Wants To Catch Them All \u2014 With Malware<\/p>\n

Downloaded hundreds of times before they were removed from the VS Code marketplace, the malicious extensions posed as \u201ctools tailored for developers with AI vibe coders.\u201d VS Code is the free code editor from Microsoft that is \u201ca go-to choice for programmers,\u201d Ernestas Naprys from Cybernews said<\/a> in reporting the issue. <\/p>\n

John Tuckner, founder of malicious software extensions protection outfit, Secure Annex, first warned<\/a> of the dangers in an October 31 posting detailing how a total of five malicious extensions were published to the marketplace. Of the Pokemon theme extension, Tuckner said that \u201csadly, the extension only downloads malware instead of even changing highlighting syntax or showing Pikachu when you hover functions.\u201d<\/p>\n

It does serve as a warning for all of the dangers of tools that purport to be of help, although in this case, that\u2019s highly debatable, for vibe coders. \u201cThe extension contains no theme functionality, dancing Pikachu sprites, and immediately executes malicious code upon installation,\u201d Tuckner confirmed. The payload was cryptomining malware on this occasion, although the same technique, which included disabling Windows Defender, could be put to use for other malicious activity.<\/p>\n

Vibe coding Pokemon fans will, I\u2019m sure, be upset to learn that the extension didn\u2019t provide the promised Pokemon-themed syntax highlighting, file icon hover Pokemon animations, random Pokemon encounters in the output panel and even Pokemon-themed comments as code snippets. The rest of us will probably be wondering what these people are thinking of and getting on with our lives. <\/p>\n

ForbesLinkedIn DM Attack Warning \u2014 What Users Need To KnowBy Davey Winder<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Beware these vibe coded Pokemon themes. SOPA Images\/LightRocket via Getty Images So far this month, I have reported…\n","protected":false},"author":2,"featured_media":255774,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[64,63,151050,151049,151047,151052,151048,151053,105,151045,151046,151051,4201],"class_list":["post-255773","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-au","tag-australia","tag-malicious-pokemon-extension","tag-malicious-pokemon-theme","tag-malicious-vibe-code","tag-pokemon-security-warning","tag-pokemon-theme","tag-secure-annex","tag-technology","tag-vibe-code","tag-vibe-code-attack","tag-vibe-code-warning","tag-vibe-coding"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/255773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=255773"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/255773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/255774"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=255773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=255773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=255773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}