Bloom Security’s “Extension Resurrection” research found that legitimate VS Code and Open VSX extension packs can reference extensions that don’t exist on the marketplace. Attackers could claim those ...

Microsoft's latest VS Code update adds provider switching and a GitHub-free entry path specifically for Claude sessions.

You can customize websites without coding by using AI to create Tampermonkey user scripts or custom browser extensions. These tools can change fonts, remove clutter ...

Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

Microsoft has aligned VS Code's existing agent-plugin feature with a vendor-neutral format for portable skills and MCP servers.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Sinch today announced the availability of Agent Tools, a new suite of tools designed to help developers build, test and deploy applications powered by the Sinch communication infrastructure platform ...

Izzi Software, owner of ColeSoft, the leading provider of debugging solutions for IBM mainframe environments, is proud to announce its industry-leading Z/XDC debugging software is now widely available ...

Typst is an easy and powerful markup-based language for creating technical documentation and books – and a compelling ...

In the new release, developers can experimentally dictate in VS Code without a speech extension and gain deeper insights into subagents.

New Package Firewall CLI, VS Code extension, and AI coding assistant plugins enforce package trust before malicious or policy-violating dependencies are installed. Modern software supply chain attacks ...