Plus, more improvements to AI agents and TypeScript 7 support.

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Microsoft previews a GitHub Copilot-powered VS Code Insiders tool that modernizes JavaScript/TypeScript apps by upgrading npm ...

There's a lot more to these two than just a name change.

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Microsoft has outlined several ways in which it improved Visual Studio 2026 in November 2025, including better semantic ...

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.

Syntax highlighting and auto-complete with IntelliSense. Smart completions based on variable types, function definitions, and imported modules. It is Extensible and customizable, supports Git commands ...

Get better AI workflows now, including agent mode for refactors. The green build supports OpenAI-compatible endpoints and local servers.

Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.