SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.
Now shipping in the VS Code Insiders build, Microsoft's new Visual Studio Code Agents preview offers an early look at a separate companion app for agent sessions, approvals, workspace discovery, and ...
The hidden VS Code tool has replaced the terminal for me.
Try these extensions and you'll wonder how you ever lived without them!
Last May, Jacob Shaul logged onto his computer and began remotely teaching more than 170 students in Bolivia the basics of ...