Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M installs.

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...

Four serious new vulnerabilities affect Microsoft Visual Studio Code, Cursor and Windsurf extensions, three of which remain ...

Developers using the "Insiders" build of the May 2024 Visual Studio Code update, bringing the open-source-based, cross-platform code editor to version 1.90, can now enjoy enhanced chat AI ...

The new extension for Visual Studio Code aims to end the previous fragmentation and ensure a uniform workflow with Python environments.

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...

To learn more about these extensions, continue reading. This extension has been developed by Tim Kmcel, and it does almost everything you can expect it to be done. From answering general questions to ...