Glassworm malware returns in third wave of malicious VS Code packages

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.
Bleeping Computer

Malicious VSCode extensions with millions of installs discovered

A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official theme ...
adtmag.com

VSCodium Strips Microsoft Telemetry from VS Code with FOSS License

A new open-source build of the popular Visual Studio Code (VS Code) editor stripped of Microsoft customizations and released under a "real" open-source license is now available. VSCodium is not a fork ...
InfoQ

MSSQL Extension for VS Code 1.34.0 Deepens Copilot Agent Mode, Adds Colour‑Coded Connections

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Vivek Yadav, an engineering manager from ...
Visual Studio Magazine

Worried About Privacy? VSCodium Strips Microsoft Telemetry from VS Code, with FOSS License

A GitHub project called VSCodium offers up the popular Visual Studio Code editor, but stripped of Microsoft customizations and released under a "real" open source license. Thus the MIT-licensed ...