A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...
Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...
Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
Learn how the ShadyPanda campaign turned trusted browser extensions into spyware and the steps security teams can take to reduce extension risk.
Microsoft's November 2025 Visual Studio Code update (version 1.107) advances multi-agent orchestration for GitHub Copilot and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback