A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

VS Mac 在质量方面也有不少问题。在今年 2 月发布 17.5 版本时，其改进了 Git 支持。但当时就有开发者宣称，“Visual Studio Mac 是一款完全无用的产品”，理由是其性能缓慢、调试器和测试资源管理器存在缺陷、.NET SDK ...

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...

Hackers are targeting macOS developers with the crypto-stealing GlassWorm malware by distributing malicious extensions on the ...

Security topics take the top spots by a clear margin: in software development, it's supply chain incidents that make life ...

CZ confirms Trust Wallet will reimburse users after $20M Christmas hack. Gnosis executes controversial hard fork amid crypto breaches.

VS Code is one of the most popular open-source (mostly) applications out there, and for good reason: It does everything you ...

Microsoft is previewing a new AI-assisted tool for Visual Studio Code Insiders called the JavaScript/TypeScript Modernizer. It's designed to help developers modernize older JavaScript or TypeScript ...

A new malware campaign is A/B testing delivery effectiveness on software developers using malicious VS Code extensions. In a campaign tracked by Koi, a threat actor published two malicious VS Code ...

Threat actors continue to probe Visual Studio Code's extension ecosystem, and a late November incident shows how quickly a trusted developer tool can be turned into a supply chain beachhead. In a ...

In December 2025, the GlassWorm supply chain malware campaign emerged again, affecting both the Microsoft Visual Studio Marketplace and Open VSX platforms. This episode involved 24 extensions posing ...