Malicious VSCode Marketplace extensions hid trojan in fake PNG file

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more ...
GitHub

DAP-MCP: Debug Adapter Protocol for AI Agents

Traditional debugging requires manually setting breakpoints, stepping through code, and inspecting state. DAP-MCP exposes these capabilities to LLMs, enabling: ...
Visual Studio Magazine

Threat Actors Keep Weaponizing VS Code Extensions

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...
GitHub

github.copilot doesn't have arm64 node bindings

Copilot Chat Extension Version: 1.388.0 VS Code Version: 1.106.2 OS Version: Windows 11, ARM64 Feature (e.g. agent/edit/ask mode): GitHub Copilot Language Server Selected model (e.g. GPT 4.1, Claude 3 ...