33
Privacy Sponsorlink Starting Version 4.20 Discussion
general · 2 signals · 1 source
Evidence
Privacy issues with SponsorLink, starting from version 4.20 — There's a related discussion on Reddit: https://www.reddit.com/r/dotnet/comments/15ljdcc/does_moq_in_its_latest_version_extract_and_send/ It seems that starting from version 4.20, SponsorLink is included. This is a closed-source project, provided as a dll with obfuscated code,
URGENT: SECURITY: New maintainer is probably malicious — **TLDR**: The old maintainer appears to have **sold** the extension to parties unknown, who have **malicious intent** to exploit the users of this extension in advertising fraud, tracking, and more. In v7.1.8 of the extension (published to the web store but NOT to GitHub), **arb