VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...
Socket has notified the Eclipse Foundation, which oversees the Open VSX marketplace, of the latest fraudulent additions, and Burckhardt expects that by now all 73 have been deleted.
How-To Geek on MSN
10 VS Code extensions I can't live without
Try these extensions and you'll wonder how you ever lived without them!
MUO on MSN
I had Claude, ChatGPT, and Gemini each build the same Chrome extension, and only one actually worked
Three LLMs, one prompt, and a lot of disappointment.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results