Vulnerabilities VS Code Vulnerability Allows One-Click GitHub Token Theft A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance. Eduard KovacsJune 4, 2026
Malware & Threats North Korean Hackers Target macOS Developers via Malicious VS Code Projects The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code. Ionut ArghireJanuary 21, 2026
Application Security GlassWorm Malware Returns to Open VSX, Emerges on GitHub Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well. Ionut ArghireNovember 10, 2025
Malware & Threats Supply Chain Attack Targets VS Code Extensions With ‘GlassWorm’ Malware The malware uses invisible Unicode characters to hide its code and blockchain-based infrastructure to prevent takedowns. Ionut ArghireOctober 21, 2025