GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.
VS Code 1.112 adds native image support for agents, and I used it on three Microsoft AI Foundry leaderboard screenshots to see whether it could turn chart-heavy visuals into a useful developer summary ...
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...