Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...
A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...
Once trust is granted to the repository's author, a malicious app executes arbitrary commands on the victim's system with no ...
Just yesterday, we noted the growing threat of ransomware. Now, Jamf Threat Labs is warning that North Korean threat actors ...
Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...
AI space! GitHub Copilot's vision and image-based features arrived first in VS Code in February 2025 and have since become ...
Visual Studio Code 1.108 introduces Agent Skills for GitHub Copilot, enabling developers to define reusable, domain-specific ...
The first release of the year experiments with Agent Skills, simplifies profile importing, and clears thousands of open issues.
Sourcegraph’s AI code assistant goes beyond individual dev productivity, helping you achieve consistency and quality at scale with AI. Sourcegraph accelerates the entire workflow for developers by ...