Back
Tool
VS Code
Related CVEs
Recent activity
Supply Chain Attack Targets Checkmarx KICS Tool via Docker and VSCode ExtensionsHackers have compromised Docker images and VSCode extensions for the Checkmarx KICS analysis tool, which is used to identify security vulnerabilities in source code. The attack inv…GlassWorm Malware Campaign Targets OpenVSX with 73 Malicious ExtensionsA resurgence of the GlassWorm malware campaign has been identified, targeting the OpenVSX ecosystem with 73 'sleeper' extensions that become malicious after updates. Six of these e…Critical Vulnerabilities in Oracle Products Expose Users to AttacksMultiple vulnerabilities have been identified in Oracle products, including MySQL Shell and Oracle Identity Manager, with CVEs CVE-2026-46870, CVE-2026-83340, and CVE-2026-83351. T…Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and GoogleThe Glassworm botnet, which has targeted software developers since early 2025, was taken down in a coordinated operation by CrowdStrike, Google, and the Shadowserver Foundation on …TeamPCP Targets CI/CD Pipelines to Steal Developer CredentialsTeamPCP, a financially motivated threat actor, has been conducting a campaign targeting software supply chains from March 19 to April 24, 2026. The group exploited trusted CI/CD an…GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code ExtensionOn May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attri…Developer Machines Targeted in Surge of Supply Chain AttacksIn the past three months, developers have reported a seven-fold increase in vulnerabilities related to supply chain attacks. These attacks primarily target developer workstations, …Blockchain C2 Malware Targets Cloud Credentials in Supply Chain AttacksRecent campaigns involving the ChainDrop npm worm and the PolinRider operation have exploited blockchain networks as command-and-control (C2) infrastructure to steal cloud credenti…Sandbox Escapes Discovered in Major AI Coding ToolsPillar Security has identified vulnerabilities in four AI coding agents—Cursor, Codex, Gemini CLI, and Antigravity—that allow for sandbox escapes without direct attacks on the sand…