Two VSCode extensions are harvesting sensitive data and sending it to China.

sec-docs is organized by programming language, with folders for each major OSS project. Each project contains subfolders with detailed analyses performed at a specific date using a certain LLM model.

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...

Another wave of malicious browser extensions capable of tracking user activity have been found across Chrome, Firefox, and ...

A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...

Microsoft has released the Copilot Studio extension for Visual Studio Code to general availability, enabling teams to build, ...