Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

VSCodium avoids this entire issue. It is a community-driven option for those who don't want the proprietary distribution ...

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.

D espite the programming landscape teeming with cool code editors, many developers (including yours truly) rely on Visual Studio Code to develop apps, create scripts, and edit con ...

Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...

GitHub Copilot users can now select Anthropic's Claude Opus 4.5 model in chat across Visual Studio Code and Visual Studio ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

What if your favorite coding tool just got smarter, faster, and more intuitive? That’s exactly what the latest update to Visual Studio Code (VS Code) promises. With a bold focus on AI integration, ...