VSCode IDE forks expose users to "recommended extension" attacks

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, ...
InfoWorld

Intro to VSCode.dev: The IDE in your browser

Welcome to the brave new world of modern, remote development in your browser. Let's get started with VSCode.dev. The fully realized browser-based IDE has been a long time coming. Ever since the ...
TechRadar

The VSCode Marketplace is pretty easy to hack with malicious extensions

VSCode Marketplace, a repository for Visual Studio Code (VSC) externsions, has poor security defenses, allowing threat actors to abuse it and distribute malicious code among the millions of its users, ...
Visual Studio Magazine

Google's Antigravity IDE Sparks Forking Debate

Google's new AI-powered Antigravity IDE has triggered an intense discussion among developers after many users quickly concluded that the tool is based on Microsoft's Visual Studio Code. A Hacker News ...
Bleeping Computer

Malicious VSCode extensions on Microsoft's registry drop infostealers

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that can take screenshots, steal credentials, crypto wallets, and ...
Visual Studio Magazine

AI-Powered Trae IDE Ships from Chinese TikTok Owner: 'It Looks To Be a Fork'

As Chinese AI tech shakes up the entire industry with new breakthroughs, a new AI-powered IDE from a Beijing firm is flying under the radar, apparently based on the same tech that powers Visual Studio ...