Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Microsoft has aligned VS Code's existing agent-plugin feature with a vendor-neutral format for portable skills and MCP servers.

Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

Spread the love“`html If you’re a developer, or even just someone who dabbles in code, chances are you’ve spent a fair bit of ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Ever felt that pang of frustration when your code, which looked perfectly logical on paper, just refuses to behave? You’re not alone. Every developer, from the seasoned pro to the absolute beginner, ...

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

I found the one file that ends the reinstall nightmare for good ...

Google joined Amazon and Microsoft in backing an open package format for portable AI-agent skills and MCP servers.

VS Code model picker now allows users to switch between Anthropic and Copilot providers between turns reconfiguring the agent host. Microsoft has released Visual Studio Code 1.133, an update to its ...

Latest update to Microsoft’s code editor improves dictation, introduces side chats, and adds support for comments to provide ...