How-To Geek on MSN

I ditched VS Code for the open-source VSCodium, and I have no regrets

VS Code is one of the most popular open-source (mostly) applications out there, and for good reason: It does everything you ...

Malicious extensions in Chrome Web store steal user credentials

Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user ...

Featured Chrome extension could be copying your AI chats

A “Featured” browser add-on marketed as privacy protection may have been copying AI chats. Koi Security says Urban VPN Proxy began intercepting prompts and replies after a July 9, 2025 update.
How-To Geek on MSN

I ditched VS Code for Google’s Antigravity, and I’m not going back

In February, the Trump administration barred AP reporters and photographers from covering White House events for not obeying the president’s executive order renaming the Gulf of Mexico to the Gulf of ...
IEEE

CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions

Abstract: Scripting languages like Python or JavaScript are extremely popular among developers, in part due to their massive open-source ecosystems that enable smooth code reuse. However, recent work ...
Infosecurity-magazine.com

Malware Discovered in 19 Visual Studio Code Extensions

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...
cybernews

New malware on Microsoft Marketplace steals passwords and screenshots of desktops

Some developers thought they were installing a dark theme and an AI assistant on their VS Code. However, it turned out to be malware that stole their data. Researchers at Koi, a cybersecurity firm, ...
The Hacker News

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware. The VS Code ...
GitHub

Improve bootstrap extension experience when using Profiles

Users may miss out on bootstrapped extensions if they are using Profiles and haven't configured the Profile to inherit all extensions from the Default profile. See discussion: #10900 (reply in thread) ...
The Hacker News

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools ...
Bleeping Computer

Glassworm malware returns in third wave of malicious VS Code packages

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...
GitHub

ran-codes/code-organizer-vscode

Transform your code files into organized, navigable documents with a table of contents-like structure. Create sections using simple comments, then use VS Code's built-in Outline panel to view and ...