How-To Geek on MSN

I ditched VS Code for the open-source VSCodium, and I have no regrets

VS Code is one of the most popular open-source (mostly) applications out there, and for good reason: It does everything you ...
How-To Geek on MSN

Plex server changes, the new Visual Studio Code, and more: News roundup

Visual Studio Code and other lightweight editors might be the most popular choices for Python programming, but JetBrains PyCharm is still great for complex projects and debugging. The latest update is ...
The Hacker News

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware. The VS Code ...
Bleeping Computer

Glassworm malware returns in third wave of malicious VS Code packages

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...
TechRepublic

Malware Injected Into Code Packages That Get 2 Billion+ Downloads Each Week

Malware Injected Into Code Packages That Get 2 Billion+ Downloads Each Week Your email has been sent An attack targeting the Node.js ecosystem was just identified ...
Microsoft

Multi-agent orchestration, maker controls, and more: Microsoft Copilot Studio announcements at Microsoft Build 2025

Microsoft Build 2025 is here—our annual showcase of the most exciting innovations shaping the future of development and AI. For engineers, makers, and subject matter experts, it’s the moment to see ...
Wired

AI Code Hallucinations Increase the Risk of ‘Package Confusion’ Attacks

AI-generated computer code is rife with references to nonexistent third-party libraries, creating a golden opportunity for supply-chain attacks that poison legitimate programs with malicious packages ...
CSOonline

AI hallucinations lead to a new cyber threat: Slopsquatting

Cybersecurity researchers are warning of a new type of supply chain attack, Slopsquatting, induced by a hallucinating generative AI model recommending non-existent dependencies. According to research ...
WGAL

Beware of new QR code scam involving unsolicited packages

Strange packages you didn't order showing up on your doorstep. I got this strange package in the mail. It's addressed to me. Never ordered it, so I'm like, Is this *** scam? There was an envelope that ...