A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Visual Studio Code just released its November 2025 update, version 1.107. There are more improvements for AI coding agents ...

Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing ...

The text editor is the most critical tool in a programmer's arsenal, acting as the daily workbench, primary interface, and ...

Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Microsoft has outlined several ways in which it improved Visual Studio 2026 in November 2025, including better semantic ...

Malware is back on the OpenVSX and Microsoft Visual Studio marketplaces, researchers are warning. In mid-September this year, ...

The Glassworm campaign is proving to be more persistent than expected. After malicious extensions appeared in both the ...

Agent HQ provides a single location for managing both local and remote coding agents and introduces a plan agent that breaks down complex tasks into steps before coding. The latest update to the ...

Organizations have accidentally exposed secrets across Microsoft Visual Studio Code (VS Code) marketplaces, posing significant risks not just to the organizations themselves but also to the greater ...