A published VS Code extension didn't hide the fact that it encrypts and exfiltrates data and also failed to remove obvious signs it was AI-generated.
GlassWorm, a self-propagating VS Code malware first found in the Open VSX marketplace, continues to infect developer devices ...
The October 2025 update to Visual Studio Code (v1.106) introduces Agent HQ for managing AI agents, expands Model Context ...
Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...
Kingdom Come Deliverance 2 update 1.050/1.5 is out on November 11, alongside DLC 3 "Mysteria Ecclesiae" on all platforms.
A malicious extension was published on Microsoft’s official VS Code marketplace, and was able to remain there for some time ...