Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Microsoft has announced general availability of its new Microsoft Edge Tools for VS Code extension, which lets developers embed Edge's browser developer tools into Microsoft's popular cross-platform ...

Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing ...

Malicious VS Code extension ‘susvsex’ acted as ransomware and used GitHub for command control Extension appeared AI-generated, with embedded decryption keys and suspicious metadata Microsoft removed ...