HelixGuard exposed a VSCode supply chain attack using 12 malicious extensions. They steal source code, capture screenshots, and open reverse shells via Ngrok and AWS EC2 to compromise developers.

A sophisticated malware campaign is hijacking developers through their favorite IDE

Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry that harbors a Remote Access Trojan (RAT) called…

GlassWorm resurfaced, infecting 3 new VS Code extensions on OpenVSX. The worm uses invisible Unicode and Solana blockchain C2 to steal credentials and spread via AI-generated malicious commits on GitHub.

Maulana Malik Ibrahim

Pernah nggak sih kalian nemuin halaman login web yang UI-nya estetik banget, warnanya ungu pastel gemoy, dan kelihatan super aman? Buat…

“I Was a Vibe Coder. Here Is What Broke Me Out of It.”

Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.

Enterprise perimeter defenses are fundamentally built on an obsolete assumption that, the developer’s workstation is a secure, trusted…

A critical GitHub token stealing bug targets github.dev web spaces. Learn how it exploits the VSCode webview security model to hijack private repositories.