Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...
Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.
In a social media feedback thread started by Microsoft Visual Studio guru Mads Kristensen, multiple developers unloaded on the IDE's facility with AI provided by GitHub Copilot and other tools.
Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M installs.
With "vibe coding" taking over software development with AI-driven programming and other advanced functionality, you would think the Visual Studio Code Marketplace would be flooded with new extensions ...
Microsoft's text editor 'Visual Studio Code' has an extension marketplace, where users can easily install various extensions. A Reddit post pointed out that only Microsoft extensions can use special ...