InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
Microsoft

Contagious Interview: Malware delivered through fake developer job interviews

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

A.I. Writes Buggy Code. A Silicon Valley Start-Up Wants to Fix It.

These start-ups, including Axiom Math and Harmonic, both in Palo Alto, Calif., and Logical Intelligence in San Francisco, hope to create A.I. systems that can automatically verify computer code in ...
Visual Studio Magazine

Hands On with VS Code 1.111 Autopilot (Preview) for AI Prompts

VS Code 1.111 Autopilot is not just a no-prompts mode. In testing, it handled a blocking question that still stopped Bypass.
XDA Developers on MSN

I replaced VS Code with this open-source editor and it's faster, lighter, and runs all my extensions

You also get to escape Microsoft telemetry tracking too.
The Register on MSN

Microsoft ships VS Code weekly, adds Autopilot mode so AI can wreak havoc without bothering you

Google also enables auto-approval of AI agents while their documentation warns against it Microsoft's Visual Studio Code (VS Code) is moving to a weekly release cycle, as well as joining Google in ...
WinBuzzer

GitHub: Glassworm Hides Malware in Invisible Unicode Across 151+ Repos

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that evade standard code review.