In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace Trust model as the primary safeguard against repo-based malware -- while ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

GitHub's new Agents tab centralizes Copilot coding agent sessions in a repository, making it easier to launch tasks, track progress, and review the resulting pull requests in standard tooling such as ...

The classic VS Code is great and all, but these specialized forks are better for certain programming tasks ...