Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

VS Code can use LLM models other than GitHub Copilot’s built-in providers for AI-assisted development, including local and ...

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Researchers from Zscaler found a new malware campaign dubbed Edgecution.

VS Code’s secret weapons ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Business users can now determine the best course of action under real-world constraints and uncertainty, with input ...

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...

We installed WSL Containers on Windows 11, built a custom container from scratch, tested it, and checked what still needs ...