A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

Microsoft has deactivated the IntelliCode extensions for VS Code and refers to Copilot, which has a limited free volume.

Microsoft's November 2025 Visual Studio Code update (version 1.107) advances multi-agent orchestration for GitHub Copilot and ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

Reversing Labs and Assaraf discover campaign targeting software and web3 devs Multiple packages were hiding weaponized code that deploys stage-two malware The malicious intent was very difficult to ...

Visual Studio Code is a code editor that is completely free and open-source. It has been developed by Microsoft and is highly regarded by developers due to its lightweight, fast, and extensible design ...