vscode
20 articles with this tag
MEDIUM
MEDIUM
HIGH
HIGH
CRITICAL
MEDIUM
CRITICAL
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability
Supply chain analysis: Kickbacks.ai VS Code extension. Empty pubkey, CSP relaxation, 90-second unsigned self-update, 60-second reassertion loop
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability
VS Code adds 2-hour delay for extension updates to combat supply chain threats
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Hole in GitHub’s browser-based VSCode editor could lead to stolen token
1-Click GitHub Token Stealing via a VSCode Bug
VS Code WARNING: 3800 repos hacked
GitHub confirms breach of 3,800 repos via malicious VSCode extension
Compromising Cline's Production Releases just by Prompting an Issue Triager
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
Flaws in four popular VS Code extensions left 128 million installs open to attack
Flaws in popular VSCode extensions expose developers to attacks
VS Code Configs Expose GitHub Codespaces to Attacks
Clawdbot Malware
Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack
DPRK Actors Deploy VS Code Tunnels for Remote Hacking
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware