News VS Code zero-day lets hackers steal GitHub tokens in one click
A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows at...
VSCode
News 
News New Checkmarx supply-chain breach affects KICS analysis tool
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest s...
News GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repo...
News Flaws in popular VSCode extensions expose developers to attacks
Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collecti...
News Malicious AI extensions on VSCode Marketplace steal developer data
Two malicious extensions in Microsoft’s Visual Studio Code (VSCode) Marketplace that were collectively installed 1.5 mil...
News VSCode IDE forks expose users to “recommended extension” attacks
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae,...
News New GlassWorm malware wave targets Macs with trojanized crypto wallets
A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that de...
News 悪質なVSCodeマーケットプレイス拡張機能、偽PNGファイルにトロイの木馬を隠す
VSCode Marketplace上で19のエクステンションを使用したステルスキャンペーンが2月から活動し、依存フォルダ内にマルウェアを隠して開発者を標的にしていた。 この悪質な活動は最近発覚し、セキュリティ研究者は、運営者が.PNG画像...
News マイクロソフト社のレジストリにある悪質なVSCode拡張機能が情報泥棒を落とす
MicrosoftのVisual Studio Code Marketplaceにある2つの悪意のある拡張機能が、開発者のマシンに感染し、スクリーンショットを撮影したり、認証情報や暗号ウォレットを盗んだり、ブラウザセッションを乗っ取ったりす...
News Glassworm malware returns in third wave of malicious VS Code packages
The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now i...