A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
GitHub Copilot Fusion went GA Oct. 28 in VS Code, CLI and JetBrains. Three effort tiers, a 30% discount through Nov. 30 and a ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
New Relic has announced a suite of integrations for GitHub Copilot that bring continuous telemetry directly into developers’ ...
GitHub's new npm package firewall blocks downloads based on malware advisories, vulnerabilities, attestations, install ...
In the world of Microsoft 365, the options for "building apps" using Copilot are increasing rapidly.There are ways to build ...
New Agent Host functionality lets developers direct agents running on their own machines through GitHub Mobile, while maintaining sessions across VS Code windows and custom clients.