Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...
North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...
Experts reveal Evelyn Stealer malware abusing VS Code extensions to steal developer credentials, browser data, and ...
AI space! GitHub Copilot's vision and image-based features arrived first in VS Code in February 2025 and have since become ...
Meanwhile, the model layer keeps whiplashing. First, everyone used ChatGPT. Then Gemini was catching up. Now, it seems Claude ...
The Webview UI Toolkit for VS Code will be deprecated on January 1, 2025. See the deprecation announcement for more details. Webviews are a powerful way to add custom functionality beyond what the ...
This extension from CodeSecure provides access to static code analysis results from a CodeSonar hub inside Visual Studio Code. You will also need access to a CodeSonar hub running CodeSonar 7.1p0 or ...
A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions of crypto wallet applications. Extensions in the ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results