Microsoft's latest VS Code update enables Copilot and custom agents to collaborate via the new Agent HQ. It also integrates ...

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Plus, more improvements to AI agents and TypeScript 7 support.

Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...

There's a lot more to these two than just a name change.

Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

GitHub Copilot users can now select Anthropic's Claude Opus 4.5 model in chat across Visual Studio Code and Visual Studio ...

Microsoft has outlined several ways in which it improved Visual Studio 2026 in November 2025, including better semantic ...

Malware is back on the OpenVSX and Microsoft Visual Studio marketplaces, researchers are warning. In mid-September this year, ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.