The January 2026 update has arrived.
Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
How-To Geek on MSN
Visual Studio Code is eating up hundreds of gigabytes on Linux
Those project files you deleted might not actually be deleted.
In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...
Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results