GuardDog is a CLI tool that uses heuristics and Semgrep rules to scan for malicious npm, PyPI, Go, and VSCode packages, helping to secure the software supply chain.

A Close Call: How a Malicious Pull Request Nearly Unleashed a Wiper Attack via Amazon Q Developer

Visual Studio Code (VS Code) has become the beating heart of modern software development — fast, flexible, and open. But new research from…

Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.

The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.

Koi Security exposed GlassWorm, the first VSCode worm that spreads autonomously, using invisible Unicode to hide malicious code. It uses Solana blockchain and Google Calendar for a resilient C2.

HelixGuard exposed a VSCode supply chain attack using 12 malicious extensions. They steal source code, capture screenshots, and open reverse shells via Ngrok and AWS EC2 to compromise developers.

A sophisticated malware campaign is hijacking developers through their favorite IDE

Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry that harbors a Remote Access Trojan (RAT) called…

GlassWorm resurfaced, infecting 3 new VS Code extensions on OpenVSX. The worm uses invisible Unicode and Solana blockchain C2 to steal credentials and spread via AI-generated malicious commits on GitHub.

Maulana Malik Ibrahim

Pernah nggak sih kalian nemuin halaman login web yang UI-nya estetik banget, warnanya ungu pastel gemoy, dan kelihatan super aman? Buat…

“I Was a Vibe Coder. Here Is What Broke Me Out of It.”

Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.

Enterprise perimeter defenses are fundamentally built on an obsolete assumption that, the developer’s workstation is a secure, trusted…

A critical GitHub token stealing bug targets github.dev web spaces. Learn how it exploits the VSCode webview security model to hijack private repositories.