Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...
A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...
A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...
A new malware campaign is A/B testing delivery effectiveness on software developers using malicious VS Code extensions.
Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
Google forking VS Code was a very significant change, and there weren’t many signs that this was coming. When Google, a ...
Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...
Visual Studio Code just released its November 2025 update, version 1.107. There are more improvements for AI coding agents ...