Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...
Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...
VS Code forks like Cursor, Windsurf, and Google Antigravity may share a common foundation, but hands-on testing shows they ...
A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...
Once trust is granted to the repository's author, a malicious app executes arbitrary commands on the victim's system with no ...