Two VSCode extensions are harvesting sensitive data and sending it to China.

Moltbot doesn't have a VSCode extension - you're downloading malware instead ...

Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack ...

Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer ...

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation ...

The self-replicating malware has poisoned a fresh set of Open VSX software components, leaving potential downstream victims ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...

A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems.

EverMind Launches EverMemOS Cloud and Kicks Off 'Memory Genesis 2026' Global Developer Hackathon Supported by OpenAI ...

Moonshot AI has released Kimi K2.5, an open-source model with coding, image, and video capabilities alongside Kimi Code tool, competing with Claude Code.