Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

A bad browser extension can be a security nightmare. If it's been hijacked by a bad actor, your personal data may be at risk.

Google joined Amazon and Microsoft in backing an open package format for portable AI-agent skills and MCP servers.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Spread the love“`html In today’s relentless business environment, the phrase “time is money” isn’t just a cliché; it’s a ...

Spread the loveWhen you’re diving into the world of project management with Microsoft, you’ll quickly discover a couple of ...

Microsoft shipped four VS Code releases across May and early June 2026 — versions 1.120 through 1.123 — that together crossed a threshold the company had been approaching for more than a year: ...

Microsoft has announced Visual Studio Code 1.122, just one week after the release of VS Code 1.121. The new update focuses on agent improvements, Bring Your Own Key flexibility, web app testing ...

Microsoft has released Visual Studio Code 1.121, introducing a new batch of developer-focused improvements centered around AI agents, Markdown rendering, HTML previews, and terminal performance. The ...

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...