Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

A new malware campaign is A/B testing delivery effectiveness on software developers using malicious VS Code extensions.

Microsoft has deactivated the IntelliCode extensions for VS Code and refers to Copilot, which has a limited free volume.

Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

If you’ve ever found yourself staring at your Visual Studio Code (VS Code) setup, wondering if it could work just a little harder for you, you’re not alone. As developers, we spend countless hours in ...

With "vibe coding" taking over software development with AI-driven programming and other advanced functionality, you would think the Visual Studio Code Marketplace would be flooded with new extensions ...

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

In VS Code, scrolling through a 5000-line file always felt like the editor was stretching to keep up. In Zed, it’s ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...