A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let ...

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

Somewhere inside GitHub, a developer installed a Visual Studio Code extension. It looked like any other productivity plugin ...

GitHub Copilot multi-agent support for VS Code launched at Microsoft Build 2026 alongside Project Polaris, an in-house AI ...

GitHub confirmed a breach affecting about 3,800 internal repositories after an employee installed a malicious VS Code ...

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual ...