Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

OpenAI’s GPT-5 turns one tomorrow, and the company is marking the week by looking beyond individual models. Today, OpenAI ...

Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Tom Fenton tackles seven free and open-source AI tools bring local chat, coding, voice, design and research capabilities to personal computers and self-hosted environments.

VS Code update brings info on running subagents into the Agents window and previews built-in dictation and a Markdown editor ...

New Package Firewall CLI, VS Code extension, and AI coding assistant plugins enforce package trust before malicious or policy-violating dependencies are installed. Modern software supply chain attacks ...

Microsoft's fifth July update expands agent monitoring, adds offline speech transcription and changes Python environment management.

Spread the loveChoosing the right code editor is a bit like a chef selecting their knives: it’s a deeply personal decision ...

Separate Oracle guides for Fusion AI Agent Studio and APEX development illustrate how VS Code has evolved from a popular editor into a foundation for an expanding range of developer experiences.