Microsoft’s Visual Studio Code (VS Code) has become a go-to integrated development environment (IDE) for developers worldwide, thanks to its versatility, lightweight design, and extensive library of ...
Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.
A reported software supply chain attack involving a malicious Visual Studio Code extension has exposed the growing security risks surrounding modern development environments.
Microsoft released Visual Studio Code 1.123 on June 3, adding agent-focused features, larger model context support, integrated browser updates and a new delay for some automatic extension updates.
A new campaign involving malicious Visual Studio Code (VS Code) extensions has exposed a loophole in the VS Code Marketplace that allows threat actors to reuse names of previously removed packages.