Threat actors continue to probe Visual Studio Code's extension ecosystem, and a late November incident shows how quickly a trusted developer tool can be turned into a supply chain beachhead. In a ...

For a few days now, a supply chain attack has been running through the Visual Studio Code marketplaces. Both Microsoft's Marketplace and the alternative Open-VSX marketplace of the Eclipse Foundation ...

Microsoft’s Visual Studio Code (VS Code) has become a go-to integrated development environment (IDE) for developers worldwide, thanks to its versatility, lightweight design, and extensive library of ...

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...

Developers using the "Insiders" build of the May 2024 Visual Studio Code update, bringing the open-source-based, cross-platform code editor to version 1.90, can now enjoy enhanced chat AI ...

An unknown threat actor is deploying a large-scale, sophisticated cryptojacking campaign through a series of malicious extensions in Visual Studio Code, Microsoft’s lightweight source-code editor, ...

米Microsoftは12月8日（現地時間）、安定版「Visual Studio Code 1.74」で「リモート トンネル」（Remote Tunnels）がパブリックプレビュー機能として利用できるようになったと発表した。わざわざ「SSH」を利用しなくてもリモートの「Visual Studio Code」マシンへ ...