Malicious AI extensions on VSCode Marketplace steal developer data

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Malicious Microsoft AI extensions might have hit over 1.5 million users

Two VSCode extensions are harvesting sensitive data and sending it to China.
Bleeping Computer

VSCode IDE forks expose users to "recommended extension" attacks

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing ...
PBS

Health subsidies expire, launching millions of Americans into 2026 with steep insurance hikes

NEW YORK (AP) — Enhanced tax credits that have helped reduce the cost of health insurance for the vast majority of Affordable Care Act enrollees expired overnight, cementing higher health costs for ...