The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Enforcing continuous in-session protection across any browser on managed and unmanaged devices establishes Falcon Secure ...

Stop coding without these extensions ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

[UPDATE 04.06.2026 – 23:33 CEST] Microsoft says the issue was mitigated for its services on June 3, 2026, and that no customer action is required; this article has been updated to reflect the current ...

For more than a year, some of the developers building the apps on your phone were quietly working for someone else. A piece of malware called GlassWorm lived inside extensions for Visual Studio Code, ...

This tool is designed to assist with the identification of known security risks in a VS Code installation. It is not a guarantee of security and will not detect all possible issues. Like any automated ...

A GitHub employee installed a routine VS Code extension update on the morning of May 18, 2026. That single action handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of ...

GitHub faces an internal repository breach this week after a poisoned VS Code extension on an employee device exposed roughly 3,800 internal repositories. Customer data stored outside those ...

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

GitHub, the popular developer platform owned by Microsoft, confirmed it was hacked and attackers had stolen data from around 3,800 internal code repositories. The code hosting and sharing giant said ...