Microsoft expanded model choice in VS Code with Bring Your Own Key (BYOK), enabling developers to connect models from any provider and manage them through a new extensible API.

Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of ...

Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.

Stop wasting money on AI tools! Learn how to use VS Code and free extensions for professional-grade AI development at no ...

Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. The GlassWorm campaign that infected VS Code extensions in the Open VSX marketplace ...

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...

Supply-chain attacks have evolved considerably in the las two years going from dependency confusion or stolen SSL among ...

Microsoft's new Azure MCP Server 1.0 connects AI agents to more than 47 Azure services, simplifying automation and DevOps ...

Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

At its Waves 2025 annual conference, low-code automation vendor Make set out an AI agent strategy that emphasizes visibility ...

Overview: Linux IDEs in 2025 balance speed, flexibility, and deep coding support for all project types.Geany, VS Code, and IntelliJ IDEA cater to different hard ...

Microsoft's new MCP Server connects AI agents with Azure services via the Model Context Protocol, enabling automated cloud management.