Bloom Security found that 677 VS Code Marketplace extension packs and 94 Open VSX packs contained references to extensions that did not exist, creating a supply-chain attack path through trusted ...

Visual Studio Code is an advanced editor that supports just about every programming language in use today. That is why Visual Studio Code has more buttons, knobs, and switches than a Martian starship.

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

New York, USA, August 13th, 2026, FinanceWireDeveloper tools have become a growing part of the enterprise attack surface, ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

Spread the loveIf you’re a developer, or even just someone who tinkers with code, chances are you’ve heard of Visual Studio ...

Microsoft has aligned VS Code's existing agent-plugin feature with a vendor-neutral format for portable skills and MCP servers.

Visual Studio Code 1.109 introduces enhancements for providing agents with more skills and context and managing multiple agent sessions in parallel. The Copilot Studio extension lets developers use ...

Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Spread the love“`html If you’re a developer, or even just someone who dabbles in code, chances are you’ve spent a fair bit of ...