Search: “VS Code”

75 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 158 Vulnerability 133 Ransomware 73 Data breach 51 Exploit / PoC 47 Threat actor 34 Industry 28 Policy & legal 23 AI safety & security 20 AI tools & infra 19 Phishing & fraud 19 AI research 13 Tools 12 Research 11

SeverityAll critical 219 high 190 medium 127 low 52 info 75

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

North Korean Hackers Abuse VS Code Auto

The Hacker NewsMar 25, 06:35 UTC · Mar 25, 2026Malware

42

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker NewsJul 1, 10:25 UTC · Jul 1, 2026Malware1

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker NewsJul 10, 10:33 UTC · Jul 10, 2025Malware1

42

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

The Hacker NewsApr 28, 04:06 UTC · Apr 28, 2026Malware

42

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The Hacker NewsOct 24, 07:00 UTC · Oct 24, 2025Malware

42

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

The Hacker NewsSep 18, 12:42 UTC · Sep 18, 2025Malware

42

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

Malware Discovered in 19 Visual Studio Code Extensions

Infosecurity MagazineDec 11, 16:00 UTC · Dec 11, 2025Malware

42

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

The Hacker NewsApr 24, 09:29 UTC · Apr 24, 2026Malware

42

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross

The Hacker NewsMar 3, 06:20 UTC · Mar 3, 2026Malware

42

How cybersecurity firms took down Glassworm botnet in one shot

Security AffairsMay 27, 11:35 UTC · May 27, 2026Malware

42

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The Hacker NewsMay 27, 15:23 UTC · May 27, 2026Malware

42

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

The Hacker NewsNov 6, 04:40 UTC · Nov 6, 2025Malware

42

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The Hacker NewsFeb 23, 10:20 UTC · Feb 23, 2026Malware1

42

CrowdStrike, Google Take Down Glassworm Botnet

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2026Malware

42

AI Coding Assistants Secretly Copying All Code to China

Schneier on SecurityFeb 2, 12:05 UTC · Feb 2, 2026Malware

42

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

The Hacker NewsMay 19, 12:13 UTC · May 19, 2023Malware1

42

GlassWorm evolves with Zig dropper to infect multiple developer tools

Security AffairsApr 11, 16:27 UTC · Apr 11, 2026Malware

42

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

The Hacker NewsApr 29, 08:29 UTC · Apr 29, 2026Malware

42

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Hacker NewsFeb 4, 06:26 UTC · Feb 4, 2026Malware

42

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

The Hacker NewsJan 26, 08:54 UTC · Jan 26, 2026Malware

42

Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm Packages

The Hacker NewsAug 6, 10:50 UTC · Aug 6, 2025Malware

42

The Solidity Language open-source package was used in a $500,000 crypto heist

Kaspersky SecurelistJul 10, 11:00 UTC · Jul 10, 2025Malware

42

Self-spreading npm malware targets developers in new supply chain attack

Help Net SecurityFeb 24, 00:00 UTC · Feb 24, 2026Malware

42

Signature Validation Bug Let Malware Bypass Several Mac Security Products

The Hacker NewsJun 12, 15:04 UTC · Jun 12, 2018Malware CVE-2018-10408 CVE-2018-10405 CVE-2018-6336+5 CVEs

47

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

The Hacker NewsApr 10, 14:18 UTC · Apr 10, 2025Malware

42

Open-source tool Sage puts a security layer between AI agents and the OS

Help Net SecurityMar 9, 00:00 UTC · Mar 9, 2026Malware

42

Shai-Hulud-Like Worm Targets Developers via npm and AI Tools

Infosecurity MagazineFeb 23, 16:00 UTC · Feb 23, 2026Malware

42

DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies

The Hacker NewsFeb 11, 14:43 UTC · Feb 11, 2026Malware

42

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

Axios npm packages backdoored in supply chain attack

Help Net SecurityMar 31, 00:00 UTC · Mar 31, 2026Malware

42

OpenAI hit by supply chain attack linked to malicious TanStack packages

Security AffairsMay 16, 09:31 UTC · May 16, 2026Malware

42

Supply-chain attack using invisible code hits GitHub and other repositories

Ars Technica · SecurityMar 15, 00:00 UTC · Mar 15, 2026Malware

42

GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42