Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
A trojanized QuickFox Windows installer delivered FDMTP in a supply chain attack active since at least August 2025, after ...
Microsoft's latest weekly VS Code release adds contextual side conversations, element-level web feedback and several smaller editor refinements.
Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.