Ten popular Visual Studio Code extensions were found secretly installing XMRig miners, exploiting users’ CPUs for unauthorized cryptomining.

VSCode extension errors in Cursor? Learn why Microsoft's licensing restricts C/C++ & Remote SSH in non-Microsoft editors. Discover open-source alternatives

One threat actor. Two major marketplaces. Nearly 3 million installs. The numbers may have been faked — but the backdoors they dropped were…

Inside the Stealth Supply Chain Attack That Nearly Compromised Thousands

This isn’t just my sob story, it’s a warning for anyone using VS Code and Cursor.

Last time in Vibe Coding, our hero — the midnight programmer — found their groove, coding with lo-fi beats, coffee energy, and vibes…

ZAST EXPRESS plugin brings our zero false positive AI directly to your IDE:

GuardDog is a CLI tool that uses heuristics and Semgrep rules to scan for malicious npm, PyPI, Go, and VSCode packages, helping to secure the software supply chain.

A Close Call: How a Malicious Pull Request Nearly Unleashed a Wiper Attack via Amazon Q Developer

Visual Studio Code (VS Code) has become the beating heart of modern software development — fast, flexible, and open. But new research from…

Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.

The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.

Koi Security exposed GlassWorm, the first VSCode worm that spreads autonomously, using invisible Unicode to hide malicious code. It uses Solana blockchain and Google Calendar for a resilient C2.

HelixGuard exposed a VSCode supply chain attack using 12 malicious extensions. They steal source code, capture screenshots, and open reverse shells via Ngrok and AWS EC2 to compromise developers.

A sophisticated malware campaign is hijacking developers through their favorite IDE

Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry that harbors a Remote Access Trojan (RAT) called…

GlassWorm resurfaced, infecting 3 new VS Code extensions on OpenVSX. The worm uses invisible Unicode and Solana blockchain C2 to steal credentials and spread via AI-generated malicious commits on GitHub.

Maulana Malik Ibrahim