There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to ...

Thanks to its incredible versatility and massive extension ecosystem, VS Code has been the undisputed champion of code ...

A new campaign involving malicious Visual Studio Code (VS Code) extensions has exposed a loophole in the VS Code Marketplace that allows threat actors to reuse names of previously removed packages.

Researchers appear to have found another avenue in which to slam Microsoft for its poor cybersecurity practices - this time around, it’s the marketplace for Visual Studio Code. Visual Studio Code ...

You have probably heard of VS Code as a powerful code editor, but what if I told you it’s become my favorite writing app? I know it sounds a bit unconventional, but hear me out. For years, I struggled ...

An unknown threat actor is deploying a large-scale, sophisticated cryptojacking campaign through a series of malicious extensions in Visual Studio Code, Microsoft’s lightweight source-code editor, ...

A new and ongoing supply-chain attack is targeting developers on the OpenVSX and Microsoft Visual Studio marketplaces with ...