Search: “Visual Studio Code”

70 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 201 Malware 122 Exploit / PoC 55 Ransomware 41 Threat actor 29 Data breach 21 Industry 17 AI tools & infra 12 AI safety & security 8 Phishing & fraud 8 Policy & legal 8 AI industry 6 Advisory 5 Tools 5

SeverityAll critical 252 high 168 medium 73 low 29 info 24

Malware Discovered in 19 Visual Studio Code Extensions

Infosecurity MagazineDec 11, 16:00 UTC · Dec 11, 2025Malware

42

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

The Hacker NewsSep 18, 12:42 UTC · Sep 18, 2025Malware

42

The Solidity Language open-source package was used in a $500,000 crypto heist

Kaspersky SecurelistJul 10, 11:00 UTC · Jul 10, 2025Malware

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The Hacker NewsFeb 23, 10:20 UTC · Feb 23, 2026Malware1

42

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

The Hacker NewsApr 12, 03:41 UTC · Apr 12, 2023Malware

42

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker NewsJul 10, 10:33 UTC · Jul 10, 2025Malware1

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

The Hacker NewsApr 28, 04:06 UTC · Apr 28, 2026Malware

42

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Hacker NewsFeb 4, 06:26 UTC · Feb 4, 2026Malware

42

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The Hacker NewsOct 24, 07:00 UTC · Oct 24, 2025Malware

42

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

North Korean Hackers Abuse VS Code Auto

The Hacker NewsMar 25, 06:35 UTC · Mar 25, 2026Malware

42

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

The Hacker NewsNov 6, 04:40 UTC · Nov 6, 2025Malware

42

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

The Hacker NewsJan 26, 08:54 UTC · Jan 26, 2026Malware

42

CrowdStrike, Google Take Down Glassworm Botnet

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2026Malware

42

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker NewsJul 1, 10:25 UTC · Jul 1, 2026Malware1

42

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

The Hacker NewsAug 5, 05:49 UTC · Aug 5, 2026Malware

42

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

The Hacker NewsMay 7, 09:20 UTC · May 7, 2026Malware

42

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

The Hacker NewsJan 22, 15:32 UTC · Jan 22, 2025Malware

42

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

The Hacker NewsApr 10, 14:18 UTC · Apr 10, 2025Malware

42

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

The Hacker NewsAug 4, 05:21 UTC · Aug 4, 2026Malware1

42

Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm Packages

The Hacker NewsAug 6, 10:50 UTC · Aug 6, 2025Malware

42

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The Hacker NewsOct 19, 06:05 UTC · Oct 19, 2025Malware

42

Disclosing new PebbleDash

Kaspersky SecurelistMay 14, 11:00 UTC · May 14, 2026Malware

42

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

The Hacker NewsApr 29, 08:29 UTC · Apr 29, 2026Malware

42

⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More

The Hacker NewsApr 28, 07:38 UTC · Apr 28, 2026Malware CVE-2025-20333 CVE-2025-20362 CVE-2026-40372+20 CVEs1

47

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

The Hacker NewsApr 24, 09:29 UTC · Apr 24, 2026Malware

42

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross

The Hacker NewsMar 3, 06:20 UTC · Mar 3, 2026Malware

42

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Malware

42

China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation

The Hacker NewsMar 19, 06:51 UTC · Mar 19, 2025Malware

42

Mustang Panda Deploys Advanced Malware to Spy on Asia

The Hacker NewsSep 10, 09:57 UTC · Sep 10, 2024Malware

42

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

The Hacker NewsJun 28, 05:25 UTC · Jun 28, 2023Malware

42

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The Hacker NewsJan 18, 05:17 UTC · Jan 18, 2023Malware1

42

The devil’s in the Rich header

Kaspersky SecurelistMar 8, 17:00 UTC · Mar 8, 2018Malware1

42

MoonPeak malware from North Korean actors unveils new details on attacker infrastructure

Cisco TalosAug 21, 10:00 UTC · Aug 21, 2024Malware

42

Phorpiex botnet shuts down, source code goes up for sale

The RecordDec 15, 00:00 UTC · Dec 15, 2022Malware

42