Stop uploading to Google Drive for file sharing—this app keeps everything on your Wi-Fi.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...