Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

A suspicious Visual Studio Code extension with file-encrypting and data-stealing behavior successfully bypassed marketplace ...

A published VS Code extension didn't hide the fact that it encrypts and exfiltrates data and also failed to remove obvious signs it was AI-generated.

Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

The bug exposes the Metro development server to remote attacks, allowing arbitrary OS command execution on developer systems ...

Besides its lightweight design and compatibility with all major operating systems, a massive collection of extensions is one ...