A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
Microsoft's latest weekly VS Code release adds contextual side conversations, element-level web feedback and several smaller editor refinements.
Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.