VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.
Microsoft's May 2026 VS Code update makes BYOK usable in restricted environments while adding agent, browser and issue-reporting updates.
XAML Hot Reload for .NET MAUI has been available for Visual Studio for a while now, but now it's finally come to the IDE's open-source-based, cross-platform little cousin, Visual Studio Code. Hot ...
D Yet another aggrieved bug hunter has leaked a vulnerability affecting a Microsoft product after becoming disillusioned with ...
GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...
Claude Code plugins now have an official Anthropic-managed directory at github.com/anthropics/claude-plugins-official, consolidating 30-plus internal and 15 vetted external Claude Code extensions behi ...
GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...
With Microsoft's new Dev Configs, a Windows installation becomes a ready-to-use developer workstation with a single command – ...
The agent is doing the actual work, and VS Code is just a window.
Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.