Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...

A fake VS Code extension posing as a Moltbot AI assistant installed ScreenConnect malware, giving attackers persistent remote ...

Two VSCode extensions are harvesting sensitive data and sending it to China.

Versions installed via Snap don't delete files when users empty system trash Linux users who installed Microsoft's Visual ...

You can delete them manually though.

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

The first step in integrating Ollama into VSCode is to install the Ollama Chat extension. This extension enables you to interact with AI models offline, making it a valuable tool for developers. To ...

Chinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent remote access to compromised systems. VSCode ...

A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its graph-based approach to understanding complex codebases while also raising ...