New research has uncovered that publishers of over 100 Visual Studio Code (VS Code) extensions leaked access tokens that ...

GlassWorm spread via 14 VS Code extensions; Solana + Google Calendar C2; stole credentials, drained 49 wallets.

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. This article dives into the happens-before ...

Microsoft has released a new version of its hit Python extension for its cross-platform code editor Visual Studio Code (VS Code) that makes its Pylance language server the default. Microsoft started ...

How we followed one malicious extension to uncover a multi-extension campaignShort read for everyone: we found a malicious ...

More notable cases that could have allowed attackers to push extension updates included what ... leaky extensions on ...

Discover how the OpenAI Codex IDE transforms coding with AI-powered suggestions, automation, and real-time debugging for ...

There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to anticipate these risks. However, he added, Microsoft’s marketplace has seen ...

This week, one programmer broke a whole mess of the software the internet runs on by deleting one simple program consisting of 11 lines of code. Everything is OK now. But it's a strange case that ...

A new cyber threat is affecting developers worldwide who work with Visual Studio Code. Researchers at Koi Security have ...