VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Across the April 8 and April 15, 2026 releases, Visual Studio Code expanded its agent-focused tooling with a new companion app, better terminal interaction, session debugging and more built-in Copilot ...

Now shipping in the VS Code Insiders build, Microsoft's new Visual Studio Code Agents preview offers an early look at a separate companion app for agent sessions, approvals, workspace discovery, and ...

Business and enterprise users can now connect their own API keys to use LLMs via OpenRouter, Ollama, Google, OpenAI, and more ...

Tropic Trooper used trojanized SumatraPDF and GitHub C2 in 2024 to deploy AdaptixC2, enabling covert VS Code tunnel access.

Microsoft has released Visual Studio Code version 1.116, introducing a set of AI-focused improvements that refine developer ...

Socket has notified the Eclipse Foundation, which oversees the Open VSX marketplace, of the latest fraudulent additions, and Burckhardt expects that by now all 73 have been deleted.

But that reactive cycle is increasingly being reconsidered – especially as more efficient and adaptable systems begin to ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...

The hidden VS Code tool has replaced the terminal for me.

Ive been looking at different ways to improve my parents home and daily life, from smaller upgrades to bigger long-term ...