Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...
VS Code forks like Cursor, Windsurf, and Antigravity may share a common foundation, but hands-on testing shows they reflect sharply different philosophies around AI autonomy, workflow structure, and ...
Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...
A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...
A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...
Just yesterday, we noted the growing threat of ransomware. Now, Jamf Threat Labs is warning that North Korean threat actors ...
Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...