Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...

Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Two VSCode extensions are harvesting sensitive data and sending it to China.

Experts reveal Evelyn Stealer malware abusing VS Code extensions to steal developer credentials, browser data, and cryptocurrency wallets on Windows.

The malicious activity is targeting organizations with software development teams that rely on VS Code and third-party ...

Check Point Software Technologiesは5月16日(米国時間)、「Malicious VSCode extensions with more than 45K downloads steal PII and enable backdoors - Check Point ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace Trust model as the primary safeguard against repo-based malware -- while ...