多款流行的AI驱动VS Code分叉版本代码编辑器,包括Cursor、Windsurf、Google Antigravity和Trae等,被发现存在推荐不存在扩展的安全漏洞,可能为恶意攻击者创造供应链攻击机会。 漏洞成因分析 据Koi安全研究公司调查,这些集成开发环境继承了微软扩展市场的官方推荐 ...
多款主流AI开发环境存在关键安全漏洞,导致数百万开发者面临安装恶意软件扩展的风险。基于VSCode分支开发的Cursor、Windsurf和Google Antigravity等AI集成开发环境(IDE)被发现推荐其官方市场根本不存在的扩展程序,这些工具合计用户量超过百万。 供应链威胁:自动 ...
Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are ...
These IDEs inherit recommended extension lists from Microsoft’s marketplace. Recommendations appear in two ways: file-based prompts when opening certain file types, and software-based prompts when ...
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing ...
Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Traditional caching fails to stop "thundering ...
Google's new AI-powered Antigravity IDE has triggered an intense discussion among developers after many users quickly concluded that the tool is based on Microsoft's Visual Studio Code. A Hacker News ...
Hi, friends, being AI enthusiast, I'm an MBA, CEO and CPO who loves building products. I share my insights here.) Hi, friends, being AI enthusiast, I'm an MBA, CEO and CPO who loves building products.
at ey.registerCommand (file:///c:/MyPrograms/Tools/VSCode/resources/app/out/vs/workbench/api/node/extensionHostProcess.js:114:40314) at Object.registerCommand (file ...
Anthropic’s powerful AI assistant, Claude, now offers deep integration into VS Code. This move of Anthropic brings Claude’s advanced reasoning and code generation capabilities directly into the most ...