Socket has notified the Eclipse Foundation, which oversees the Open VSX marketplace, of the latest fraudulent additions, and Burckhardt expects that by now all 73 have been deleted.

VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.

Daniel Roe and over 250 contributors. It emphasizes speed and features absent in the official npmjs.com interface, such as ...

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Code::Blocks is a free open source IDE; it is established in C++ using wxWdigets as the GUI tool kit. Code::Blocks support compilers such as C, C++, and Fortran. Plugins extend Code::Blocks; its ...

VS Code is no longer just an IDE.

This week’s ThreatsDay covers supply chain attacks, fake help desks, wiper malware, AI prompt traps, RMM abuse, phishing kits ...

You need antivirus software. Because of AI, online threats keep getting more sophisticated—more and more AI-fueled attacks pop up with each passing week. Even the tech-savvy and cautious can get ...

You can use the Windows 10 Update Assistant to install newer versions of Windows 10 on your PC. We have seen how you can get or download the latest Windows 10 ...

Say "no" to running dubious scripts.