Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Many have run out of disk space entirely ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

OpenClaw, formerly Clawdbot and Moltbot, faces malware attacks as fake skills and extensions exploit trust in local AI tools.

Time to use something simpler!

Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack ...

Newly released records reveal the financier paid for genome sequencing and discussed gene editing research tied to longevity.

I tried a Claude Code alternative that's local, open source, and completely free - how it works ...

Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer ...

OpenAI has introduced GPT-5.3-Codex, a new generation of its Codex coding system that did more than write software for others ...