North Korean hackers target macOS developers with malware hidden in Visual Studio Code task configuration files.

Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...

North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...

A review of five non-Copilot AI coding assistants available in the Visual Studio Marketplace that support Visual Studio 2026 ...

The Copilot Studio extension lets developers use any VS Code-compatible AI assistant to develop AI agents, then sync with ...

The Security extension is an open-source Gemini CLI extension, built to enhance your repository's security posture. The extension adds a new command to Gemini CLI that analyzes code changes to ...

This extension runs the latest pdf.js underneath. A demo of their editor (hence ours) can be found here. Most extensions currently in the marketplace have problems too deep to fix. These problems ...

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

Visual Studio Code 1.108 expands AI capabilities with experimental Agent Skills for Copilot, alongside updates to chat ...

Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are ...