DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Extension silently disables competitor extensions globally with no cleanup on uninstall

Quality: 8/10 Relevance: 9/10

Summary

Meta's Pyrefly extension silently modifies the user's global VS Code settings to disable competing Python language servers and does not restore them on deactivation or uninstall. The issue highlights security and usability risks from extension-level changes, including hard-coded targets and forced dependencies on Microsoft Python tooling. It serves as a cautionary example for extension authors and IT teams about user consent, rollback capabilities, and auditing changes in developer tooling.

🚀 Service construit par Johan Denoyer