A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

This project provides a command palette extension for opening Visual Studio solutions and Visual Studio Code workspaces from a single, unified interface. Because the application is first signed by the ...

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...

Microsoft has released Visual Studio Code 1.121, introducing a new batch of developer-focused improvements centered around AI agents, Markdown rendering, HTML previews, and terminal performance. The ...

This vibe coding cheat sheet explains how plain-language prompts can build apps fast, plus the planning, testing, and security checks needed.

VS Code 1.115 introduced a preview Agents app in VS Code Insiders. VS Code 1.116 added persistent debug logs for current and past agent sessions. Both releases expanded how agents work with terminals, ...

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading ...

Visual Studio Code is moving to weekly releases. Microsoft will replace the long-standing monthly update cycle with smaller weekly updates, starting with version 1.111, to deliver features more ...

The North Korean threat actors associated with the long-running Contagious Interview campaign have been observed using malicious Microsoft Visual Studio Code (VS Code) projects as lures to deliver a ...

The Copilot Studio extension lets developers use any VS Code-compatible AI assistant to develop AI agents, then sync with Copilot Studio for testing and iteration. Microsoft is offering a Microsoft ...