A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Microsoft's November 2025 Visual Studio Code update (version 1.107) advances multi-agent orchestration for GitHub Copilot and ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

Plus, more improvements to AI agents and TypeScript 7 support.

Microsoft previews a GitHub Copilot-powered VS Code Insiders tool that modernizes JavaScript/TypeScript apps by upgrading npm ...

Benign add-ons can be weaponized with malicious updates after gaining user trust.

Overview:  VS Code leads by flexibility. It fits almost every language, workflow, and team size. That’s why it is the daily ...

All the tech news you may have missed this week.

Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing ...

With Visual Studio Code 1.107, developers can use GitHub Copilot and custom agents together and delegate work across local, ...

The latest ThreatsDay Bulletin breaks down the week’s biggest stories — rootkits evading Windows, Docker leaks, AI risks and ...