On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, ...
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
Within three years, no embedded software developer is going to be writing code. I know it sounds like another one of my controversial statements. But I recently used Claude Code to write the best ...
The official Mermaid extension for Visual Studio Code enables developers to seamlessly create, edit, preview and integrate mermaid diagrams from within the VS Code. To use the AI diagramming feature, ...
The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...
A security researcher discovered a nasty flaw in Google’s Antigravity tool, the latest example of companies rushing out AI tools vulnerable to hacking. Within 24 hours of Google releasing its ...
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence – in ...
WGAL NEWS EIGHT. POLICE IN CHAMBERSBURG IN THE FBI WANT YOU TO BE ON ALERT FOR A SCAM INVOLVING UNSOLICITED PACKAGES AND QR CODES. THEY SAY THIS IS A VARIATION OF A BRUSHING SCAM. THE FBI SAYS ...