This update comes with several new features that should make the IDE easier to use, such as sticky chats and seamless model switching mid-session.

Hundreds of NPM packages have been hit in a massive supply chain attack. The Shai-Hulud worm variant is stealing developer ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.

VS Code update brings info on running subagents into the Agents window and previews built-in dictation and a Markdown editor ...

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on Microsoft's official Visual Studio Marketplace for just 18 minutes on May 18 ...

A supply chain attack on SAP-related npm packages has put fresh scrutiny on the developer tools and build workflows that enterprises rely on to produce software. The campaign, referred to as “mini ...

Microsoft has released the beta version of TypeScript 7.0. This brings the first release with a compiler and language service written in Go ever closer. Despite the beta label, TypeScript 7.0 is said ...

Researchers at OX Security have detected four vulnerabilities in three of the most popular integrated development environments (IDEs) that could lead to cyber-attacks. In a report published on ...

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...