Attackers could easily spoof popular Visual Studio Code extensions and trick developers into downloading them, Aqua Nautilus researchers report.

Adopting these VS Code extensions has been a productivity booster for my web development setup. They have allowed me to focus on the parts of coding that I enjoy most.

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Microsoft has released the source code for the GitHub Copilot Chat extension for VS Code under the MIT license.