Search: “VS Code”

663 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 158 Vulnerability 133 Ransomware 73 Data breach 51 Exploit / PoC 47 Threat actor 34 Industry 29 Policy & legal 23 AI safety & security 20 AI tools & infra 19 Phishing & fraud 19 AI research 13 Tools 12 Research 11

SeverityAll critical 219 high 190 medium 127 low 52 info 77

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks

The Hacker NewsOct 31, 07:59 UTC · Oct 31, 2025Ransomware

60

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

The Hacker NewsFeb 26, 10:15 UTC · Feb 26, 2026Vulnerability

42

Data-stealing VS Code extensions removed from official Marketplace

Help Net SecurityMay 21, 00:00 UTC · May 21, 2025Vulnerability

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

North Korean Hackers Abuse VS Code Auto

The Hacker NewsMar 25, 06:35 UTC · Mar 25, 2026Malware

42

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

The Hacker NewsAug 10, 10:57 UTC · Aug 10, 2026Malware1

30

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker NewsJul 1, 10:25 UTC · Jul 1, 2026Malware1

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Bridgecrew announces automated cloud security in VS Code

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2021Tools

30

Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure Process

Security AffairsJun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild1

60

Vibe-Coded Malicious VS Code Extension Found with Built

The Hacker NewsNov 7, 09:00 UTC · Nov 7, 2025Ransomware1

57

Malicious VS Code Extensions Exploit Name Reuse Loophole

Infosecurity MagazineAug 28, 14:00 UTC · Aug 28, 2025Ransomware1

57

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

VS Code extensions with 125M+ installs expose users to cyberattacks

Security AffairsFeb 18, 15:14 UTC · Feb 18, 2026Vulnerability CVE-2025-65715 CVE-2025-65716 CVE-2025-657171

60

A Malicious VS Code Extension Just Breached GitHub 's Internal Repositories

Security AffairsMay 20, 08:50 UTC · May 20, 2026Data breach

57

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

The Hacker NewsJan 6, 14:17 UTC · Jan 6, 2026Threat actor

57

GitHub Breach Traced to Malicious ‘Nx Console’ VS Code Extension

Infosecurity MagazineMay 21, 14:45 UTC · May 21, 2026Data breach CVE-2026-480271

60

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker NewsJul 10, 10:33 UTC · Jul 10, 2025Malware1

42

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

55

Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokens

The Hacker NewsJun 6, 08:09 UTC · Jun 6, 2026Vulnerability1

30

Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign

Infosecurity MagazineApr 7, 16:01 UTC · Apr 7, 2025Threat actor

45

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

The Hacker NewsJan 20, 10:47 UTC · Jan 20, 2026Malware

30

Open VSX Bug Let Malicious VS Code Extensions Bypass Pre

The Hacker NewsMar 27, 13:57 UTC · Mar 27, 2026Vulnerability

30

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

The Hacker NewsJan 28, 13:38 UTC · Jan 28, 2026Malware

30

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

The Hacker NewsMay 30, 06:13 UTC · May 30, 2026Threat actor1

57

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

The Hacker NewsMay 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321 CVE-2026-48027

60

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In

The Hacker NewsMar 10, 05:53 UTC · Mar 10, 2026Ransomware

57

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

The Hacker NewsApr 28, 04:06 UTC · Apr 28, 2026Malware

42

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

The Hacker NewsNov 10, 08:51 UTC · Nov 10, 2025Malware

30

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The Hacker NewsOct 24, 07:00 UTC · Oct 24, 2025Malware

42

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

The Hacker NewsApr 10, 13:23 UTC · Apr 10, 2026Threat actor1

45

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The Hacker NewsJul 4, 11:17 UTC · Jul 4, 2026Threat actor

45

Flaws in Popular IDE Extensions Allow Data Exfiltration

Infosecurity MagazineFeb 19, 10:45 UTC · Feb 19, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-65715

60

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

The Hacker NewsSep 18, 12:42 UTC · Sep 18, 2025Malware

42

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

Malicious VS Code Extensions Deploy Advanced Infostealer

Infosecurity MagazineDec 9, 16:45 UTC · Dec 9, 2025Malware

30