The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that evade standard code review.
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
A simple prompt sent Claude Code on a mission that uncovered major security vulnerabilities in popular text editors — and ...
A smaller weekly VS Code release adds chat workflow refinements, semantic search changes, TypeScript 6.0, and new admin controls.