Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to China-based servers.

A fake VS Code extension posing as a Moltbot AI assistant installed ScreenConnect malware, giving attackers persistent remote ...

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

The classic VS Code is great and all, but these specialized forks are better for certain programming tasks ...

It's no less than a modern miracle ...

VS Code forks like Cursor, Windsurf, and Google Antigravity may share a common foundation, but hands-on testing shows they ...

The university usually re-ups football assistant coach and support staff contracts each February. This year, none were ...

Two VSCode extensions exfiltrated sensitive user data to Chinese servers ChatGPT – 中文版 and ChatMoss had over 1.5 million installs combined Extensions used hidden iframes, commands, and SDKs to steal ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

Mac users often assume they're safer than everyone else, especially when they stick to official app stores and trusted tools. That sense of security is exactly what attackers like to exploit. Security ...