Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Our client is a technology company delivering integrated software and data solutions to the retail and distribution sector. They focus on building scalable, high-performance systems that connect POS, ...

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

The Copilot Studio extension lets developers use any VS Code-compatible AI assistant to develop AI agents, then sync with Copilot Studio for testing and iteration. Microsoft is offering a Microsoft ...

Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack ...

I tried a Claude Code alternative that's local, open source, and completely free - how it works ...

Two VSCode extensions exfiltrated sensitive user data to Chinese servers ChatGPT – 中文版 and ChatMoss had over 1.5 million installs combined Extensions used hidden iframes, commands, and SDKs to steal ...

The January 2026 release of Visual Studio Code expands AI-assisted development with structured planning agents, parallel ...

Powerful tools built for developers, useful for everyone ...