SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
VS Code 1.118 adds remote Copilot control, enterprise AI restrictions, and smarter caching while improving developer ...
Truly open-source marketplace you can use with VSCodium.
The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...
VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.
Try these extensions and you'll wonder how you ever lived without them!