A published VS Code extension didn't hide the fact that it encrypts and exfiltrates data and also failed to remove obvious signs it was AI-generated.

Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

Microsoft's unified agent experience in VS Code consolidates Copilot, Codex, and custom agents, introducing Agent Sessions, a ...

A malicious extension was published on Microsoft ’s official VS Code marketplace, and was able to remain there for some time ...

Overview: Linux IDEs in 2025 balance speed, flexibility, and deep coding support for all project types.Geany, VS Code, and IntelliJ IDEA cater to different hard ...

Microsoft's November Visual Studio roadmap outlines in-progress work on multi-agent support, enhanced chat and planning, MCP ...

Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...

Cursor is another good choice for vibe coding for much the same reason as Claude Code. It’s an IDE with an AI chatbot ...

Supply-chain attacks have evolved considerably in the las two years going from dependency confusion or stolen SSL among ...

Authorised distributor Mouser Electronics is now stocking the MCX E reliability/safety-focused microcontrollers (MCUs) from ...