North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Visual Studio Code 1.90 or newer (or editors compatible with VS Code 1.90+ APIs) Go 1.21 or newer. Whether you are new to Go or an experienced Go developer, we hope this extension fits your needs and ...

Microsoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in ...

With Dev Configs for Windows, Microsoft has released an open-source collection of configurations that automate the setup of developer workstations on Windows. The configurations are based on the ...

The Container Tools extension makes it easy to build, manage, and deploy containerized applications from Visual Studio Code. It also provides one-click debugging of Node.js, Python, and .NET inside a ...

The Rust-built Zed editor has reached version 1.0, released yesterday, with development led by former members of the Atom team at GitHub. Nathan Sobo, CEO and co-founder of Zed Industries, said that ...

Cybersecurity researchers have flagged yet another evolution of the ongoing GlassWorm campaign, which employs a new Zig dropper that's designed to stealthily infect all integrated development ...

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, enabling near-frictionless compromise. A newly disclosed malware strain dubbed ...

Bitdefender researchers have discovered a malicious Windsurf IDE (integrated development environment) extension that deploys a multi-stage NodeJS stealer by using the Solana blockchain as the payload ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...

Microsoft Defender Experts identified a coordinated developer-targeting campaign delivered through malicious repositories disguised as legitimate Next.js projects and technical assessment materials.

North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The latest campaign builds on techniques seen in previous DPRK-linked ...