Visual Studio Code 1.128 is out now. It's the latest weekly release and this time brings a handful of new features.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Microsoft has rolled out Visual Studio Code 1.118, just days after releasing version 1.117, continuing its rapid update cycle with a strong focus on AI-powered development and enterprise controls. One ...

Microsoft has released the April update for Visual Studio 2026, introducing a wave of AI-focused improvements aimed at modern development workflows. The update places strong emphasis on cloud-based ...

Omar Shahine said his new Microsoft job is about bringing OpenClaw and personal agents to Microsoft 365, with Teams called out as an early integration point. OpenClaw's public docs point clearly to a ...

View commit details and file changes by clicking on a commit. On the Commit Details View you can: View the Visual Studio Code Diff of any file change by clicking on it. Open the current version of any ...

Claude Code has become increasingly popular in the first year since its launch, and especially in recent months, as developers and non-technical users alike flock to AI unicorn Anthropic's hit coding ...

Attackers are targeting developers with malicious Next.js repositories to perform remote code execution (RCE) and establish a persistent command-and-control (C2) channel on infected machines in a ...

A spear-phishing campaign by North Korean actors is abusing a legitimate feature of Microsoft Visual Studio (VS) Code to gain full remote control of targeted systems. In the campaign, discovered by ...

Just yesterday, we noted the growing threat of ransomware. Now, Jamf Threat Labs is warning that North Korean threat actors are abusing Visual Studio Code task configuration files for malware delivery ...

A suspicious Visual Studio Code extension with file-encrypting and data-stealing behavior successfully bypassed marketplace review and entered the developer ecosystem. In a suspected test effort, ...