VS Code 1.123 adds a two-hour delay before extensions auto-update to newer versions when automatic updates are enabled.

Threat actors continue to probe Visual Studio Code's extension ecosystem, and a late November incident shows how quickly a trusted developer tool can be turned into a supply chain beachhead. In a ...

The agent is doing the actual work, and VS Code is just a window.

From VS Code and Claude Code to Cursor 3.0.

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...