Visual Studio Code 1.109 introduces enhancements for providing agents with more skills and context and managing multiple ...

A set of attack vectors in GitHub Codespaces have been uncovered that enable remote code execution (RCE) by opening a ...

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

The reason for this is Snap – a Linux application packaging format – creates a local Trash folder for each VS Code version, ...

Moltbot was originally called Clawdbot, but was recently renamed to avoid trademark issues, and is one of the more popular AI tools out there, with more than 93,000 stars on GitHub at press time. Its ...

North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The ...

Two VSCode extensions are harvesting sensitive data and sending it to China.

More than 1.5 million people may have had their sensitive data exfiltrated to Chinese hackers through two malicious ...

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Google's new AI-powered Antigravity IDE has triggered an intense discussion among developers after many users quickly concluded that the tool is based on Microsoft's Visual Studio Code. A Hacker News ...

A new and ongoing supply-chain attack is targeting developers on the OpenVSX and Microsoft Visual Studio marketplaces with self-spreading malware called GlassWorm that has been installed an estimated ...