Search: “VS Code”

158 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 158 Vulnerability 133 Ransomware 73 Data breach 51 Exploit / PoC 47 Threat actor 34 Industry 28 Policy & legal 23 AI safety & security 20 AI tools & infra 19 Phishing & fraud 19 AI research 13 Tools 12 Research 11

SeverityAll critical 219 high 190 medium 127 low 52 info 75

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

North Korean Hackers Abuse VS Code Auto

The Hacker NewsMar 25, 06:35 UTC · Mar 25, 2026Malware

42

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

The Hacker NewsAug 10, 10:57 UTC · Aug 10, 2026Malware1

30

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker NewsJul 1, 10:25 UTC · Jul 1, 2026Malware1

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker NewsJul 10, 10:33 UTC · Jul 10, 2025Malware1

42

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

The Hacker NewsJan 20, 10:47 UTC · Jan 20, 2026Malware

30

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

The Hacker NewsJan 28, 13:38 UTC · Jan 28, 2026Malware

30

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

The Hacker NewsApr 28, 04:06 UTC · Apr 28, 2026Malware

42

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

The Hacker NewsNov 10, 08:51 UTC · Nov 10, 2025Malware

30

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The Hacker NewsOct 24, 07:00 UTC · Oct 24, 2025Malware

42

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

The Hacker NewsSep 18, 12:42 UTC · Sep 18, 2025Malware

42

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

Malicious VS Code Extensions Deploy Advanced Infostealer

Infosecurity MagazineDec 9, 16:45 UTC · Dec 9, 2025Malware

30

Malware Discovered in 19 Visual Studio Code Extensions

Infosecurity MagazineDec 11, 16:00 UTC · Dec 11, 2025Malware

42

BeaverTail and OtterCookie evolve with a new Javascript module

Cisco TalosOct 16, 10:00 UTC · Oct 16, 2025Malware1

30

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

The Hacker NewsApr 24, 09:29 UTC · Apr 24, 2026Malware

42

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

The Hacker NewsDec 10, 07:33 UTC · Dec 10, 2025Malware CVE-2025-55182

60

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross

The Hacker NewsMar 3, 06:20 UTC · Mar 3, 2026Malware

42

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Malware CVE-2025-59718 CVE-2025-59719 CVE-2026-24061

60

How cybersecurity firms took down Glassworm botnet in one shot

Security AffairsMay 27, 11:35 UTC · May 27, 2026Malware

42

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The Hacker NewsMay 27, 15:23 UTC · May 27, 2026Malware

42

North Korean Hackers Use Fake Coding Tasks to Steal Crypto

Infosecurity MagazineJun 8, 15:00 UTC · Jun 8, 2026Malware

30

GlassWorm malware has resurfaced on the Open VSX registry

Security AffairsNov 10, 20:06 UTC · Nov 10, 2025Malware

55

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

The Hacker NewsNov 6, 04:40 UTC · Nov 6, 2025Malware

42

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The Hacker NewsFeb 23, 10:20 UTC · Feb 23, 2026Malware1

42

CrowdStrike, Google Take Down Glassworm Botnet

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2026Malware

42

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60

Ghidra 11.3 released: New features, performance improvements, bug fixes

Help Net SecurityFeb 7, 00:00 UTC · Feb 7, 2025Malware1

30

AI Coding Assistants Secretly Copying All Code to China

Schneier on SecurityFeb 2, 12:05 UTC · Feb 2, 2026Malware

42

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

The Hacker NewsMay 19, 12:13 UTC · May 19, 2023Malware

42

GlassWorm evolves with Zig dropper to infect multiple developer tools

Security AffairsApr 11, 16:27 UTC · Apr 11, 2026Malware

42

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

The Hacker NewsAug 4, 09:03 UTC · Aug 4, 2026Malware

30

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

The Hacker NewsApr 29, 08:29 UTC · Apr 29, 2026Malware

42

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Hacker NewsFeb 4, 06:26 UTC · Feb 4, 2026Malware

42